Auto-connecting the u2f-devices interface for the coin snap

@reviewers Could you activate auto-connecting the u2f-devices interface for the coin snap https://snapcraft.io/coin

Thanks for considering it.

@mahnunchik can you please describe why coin requires u2f-devices auto-connect? Could the snap instead try and detect if this is not available and prompt the user to perform this action manually instead? Thanks.

Hello @alexmurray ,

can you please describe why coin requires u2f-devices auto-connect?

Second factor is used to confirm transactions and export private keys. So it is security impact to have not enabled U2F keys by default.

Could the snap instead try and detect if this is not available and prompt the user to perform this action manually instead?

It is electron app, so it is almost not possible to implement such behaviour.

it is rather trivial to add a yad popup to a snap through a command-chain wrapper script like (see the “is-connected” check in there):

though if you simply add an explanation to your snap description that the device uses u2f devices by default that might be enough to have the reviewers grant auto-connection …

@ogra PR is welcome https://github.com/CoinSpace/CoinSpace/tree/master/electron

@mahnunchik hey, apologize for the delay.

So, is second factor auth always part of the main flow? If yes, could you please explain this in the snap description as @ogra suggested? Since this interface grants write access to U2F devices, is very important for the user to be aware of such.

@mahnunchik ping, could you please provide the requested information?

@emitorino @ogra I’ve updated the snap description https://snapcraft.io/coin

Second factor is improved main flow, which allows users to enhance security of most important operations with money.

1 Like

+1 from me for allowing auto-connect of u2f-devices to coin since using 2fa enhances the security of the wallet operations. Thanks @mahnunchik for updating the snap description.

Can other @reviewers please vote?

+1 from me for allowing auto-connect of u2f-devices from me, as well.

+2 votes for, 0 votes against. Granting auto-connect of u2f-devices to coin. This is now live.