Signing with Confidence: YOLO to Clear Signing
summary
Claims that blind "YOLO" signing causes billions in losses and that clear signing prevents wallet-draining phishing attacks; proposes a data-driven, declarative JSON format called ERC-7730 standard to map function fields to human labels and hide protocol noise. Delivered tools include editor/preview UI, a curated public registry of signed files, conversion to Ledger-signed artifacts, and hardware integration via the Ledger Device Signer Kit; these are released and tested on devices with an adoption roadmap into Q2 2024.
AI-written summary · about
chapters (28)
- 0:00Introduction: Laurent Castillo from Ledger
- 0:51Risks of Blind (YOLO) Signing on Blockchain
- 1:36What is Blind Signing & Why It's Dangerous
- 2:15Shift in Attacks: Phishing & Scam Transactions
- 2:47Financial Impact of Blind Signing Attacks
- 3:22Clear Signing Explained & Ledger’s Vision
- 4:36Evolution of Transaction Signing on Ethereum
- 5:16Ledger's Early Solution: Plugins for Clear Signing
- 6:25Data-Driven Approach to Improve UX for Signing
- 7:06Introducing ERC-7730: A New Clear Signing Standard
- 7:43ERC-7730 Goals: A Universal Clear Signing Standard
- 8:16Why ABI Alone Isn't Enough for Clear Signing
- 8:49Limitations of ABI in User-Friendly Transactions
- 9:25How ERC-7730 Complements ABI for Better Clarity
- 10:10ERC-7730 Standard Example & Field Customization
- 10:49Philosophy of ERC-7730: Simple & Human-Readable
- 11:25Optimized for Hardware Wallet Limitations
- 12:00ERC-7730 Flexibility for Future Blockchain Trends
- 12:40Ledger’s Clear Signing Initiative: End-to-End Tools
- 13:21ERC-7730 Standard & Editing Tools Released
- 13:57Public Registry & Ledger’s Curation Process
- 14:35Ledger Integration & Hardware Wallet UI Support
- 15:22Developer Guide: How to Implement ERC-7730
- 16:05ERC-7730 at ETHGlobal Hackathon & Developer Tools
- 16:44Ledger’s Clear Signing Roadmap & Future Plans
- 17:21Accelerating Clear Signing Adoption in Q2 2024
- 18:18Addressing Ethereum Account Abstraction Challenges
- 19:12Conclusion & Resources for Ledger Clear Signing
related talks
14mLedger Tracks
15mDemystifying Digital Signatures
33mDemystify Modern Signing: Keys, Certs, and Envelopes
17mWhose Sign Is It Anyway?
27msub0 Asia 2024 - Juan Leni (Zondax)
35mAt the crossroad of Crypto and Security: A dev insider view
29mFrom Cosign to an Ecosystem: The Evolution of Sigstore
25mProving Trust: Signed Supply Chains and Verifiable Deployments at the Edge
