Investigate private key handling on the user or merchant side
levackt opened this issue · comments
Taariq Levack commented
Having the bank manage the private keys to each individual's wallet, like an exchange does, creates additional risk for the bank.
The risk is significantly reduced when an individual's wallet is lost or stolen, but the challenges include individuals not necessarily owning smart phones, or even feature phones.
Given the constraints we're exploring solutions that involve the user signing the transaction at the merchant, whilst protecting the user's private key.