Payment details belong in the open feed; don't give apps the power to move funds
Quote
the danger, the danger is within is giving the app too much power.
Episode 20: we are mapping the road. My love Fridays (approx., from transcript intro) 01:05:07 (play audio from this timestamp, opens in a new tab)
Voice-matched
Summary
The value block in XML is the correct, open, transparent way to say who should be paid. Turning that into API calls between app and wallet service is where it gets sketchy. If an app holding broad payment powers is compromised, it could drain everyone's wallets to an unknown address.
Also said
Episode 20: we are mapping the road. My love Fridays (approx., from transcript intro) 01:04:11 (play audio from this timestamp, opens in a new tab)
It specifies in an open way that everybody can see the payment addresses.
Voice-matched