Cos(余弦)😶🌫️ (@evilcos) “虽然…但是，原来 Ledger 的 Clear Signing 机制默认会采集 Ledger 用户签名时的网络/” — TopicDigg
Cos(余弦)😶🌫️
@evilcos
加入 November 2008
0 正在关注 0 粉丝
虽然…但是，原来 Ledger 的 Clear Signing 机制默认会采集 Ledger 用户签名时的网络/链 ID、目标地址（合约或收款人）、设备型号、固件版本、应用版本、是否盲签及原因等。
这个隐私采集机制不在 Ledger 固件里，在 Ledger SDK(context-module v1.16+)，所以需要支持 Ledger 连接的钱包应用来提供开关。
显示更多
This is part of how Clear Signing works. ERC-7730 descriptors, which turn raw calldata into readable fields, are too large to fit on a Ledger signer, and most integrators don’t want to bundle the full metadata set.
So the default context module in our signing kit resolves them from Ledger’s servers at signing time. That requires sending the transaction details needed to find the right descriptor. Ledger doesn’t store that data.
It runs in the developer library that wallet apps use to talk to a Ledger signer, not in device firmware.
Integrators control it and can supply their own context module to resolve metadata themselves:
How the context module works:
The descriptor registry is public:
显示更多
