Repository
https://github.com/emre/dpoll.xyz
Components
SteemConnect Revoke feature/button on the dpoll front-end
Proposal description
Dpoll is a decentralized poll application build on steem blockchain. It is primarily used to get public opinions/feedbacks on any subject within steem ecosystem. It offers a comprehensive polling experience like other conventional poll based platforms like Polldaddy, Surveymonkey, Zoomerang, etc where people can easily create polls and vote on polls created by others, too. The only difference is the fact that dpoll is blockchain based; so data stored on it is immutable and permanent which is unlike the other poll applications.
Like other steem based DApps, dpoll uses steemConnect security layer to allow users access to its platform. So once you login via steemConnect, your account is safe because neither steemConnect nor the authorized dpoll stores your keys.
However, even though it's safe to access steem DApps via steemConnect, the fact remains that once you do, you are also delegating posting and upvoting authority to that particular steem DApp. This can be exploited by malicious actors to carry out upvoting/downvoting operations without your consent.
As an example, there was a case of automated vote abuse that occurred with with utopian-io account some months back in which many steemians' posts were either upvoted or downvoted.
Based on the fact that many steemians don't even know how to revoke such permission, I therefore suggest that a Revoke feature/button be built on dpoll platform in an easily accessible spot. This will provide a seamless means of revoking such delegated authority once one is through with using the platform.
Mockups/examples
Such Revoke Access feature/button should be built in the manner similar to the below image.
Again, it is very easy to access profile page in most applications. So, I suggest the Revoke Access feature/button be built on the profile page of dpoll DApp in the position indicated in the below image.
Benefits
The case of unauthorized use of posting and voting permissions will never happen again.
Even when it's clear neither steemConnect nor any steem DApp store your keys, some less informed people could think otherwise. When the utopian-io issue occurred, a steemian that informed me about it did so in a way that portrayed utopian in bad light. The possibility of such development arising shouldn't be given any chance. So, by building such feature, possible cases of such misconception and wrong information dissemination will not arise.
People will feel more secure and confident.
Hello @sciencetech thank you for your contribution through Utopian.
You have suggested to add a revoke button to help users to be able to revoke the access from the project to be protected against any threat.
I'd like to say that your idea would be efficient and will increase the efficiency for users but this feature is a basic feature that will have a minor impact on the project.
Also please make sure to present your mockups in higher quality as much as possible to get higher scores,thank you.
Your contribution has been evaluated according to Utopian policies and guidelines, as well as a predefined set of questions pertaining to the category.
To view those questions and the relevant answers related to your post, click here.
Need help? Chat with us on Discord.
[utopian-moderator]
Thank you for your review, @sinem006! Keep up the good work!
Hey, @sciencetech!
Thanks for contributing on Utopian.
We’re already looking forward to your next contribution!
Get higher incentives and support Utopian.io!
Simply set @utopian.pay as a 5% (or higher) payout beneficiary on your contribution post (via SteemPlus or Steeditor).
Want to chat? Join us on Discord https://discord.gg/h52nFrV.
Vote for Utopian Witness!