You are right, that's what I have been saying for online services that ask for private keys, and even the seeds

The problem is that people can't refrain to put their keys for example to get "free" coins, typically they try to use bitcoin-transactions, don't succeed and go put their seeds in an online service

At least it gives an alternative, private keys are optional and the tool will output the command to use with bitcoin-transactions, and if they want to put directly their keys, then...

"Move your coins by yourself" refers more to "don't get trapped by your wallet(s) or things that you don't master like multisig, segwit, bech32, etc"

As I said the idea would be to end up with an offline tool should some people support/finance the effort

IMHO you should almost never publish a service that asks users for private keys.

A warning isn't enough. Your server might get compromised.

"Move your coins by yourself" isn't even correct if your server is involved.

On Tue, 31 Jul 2018 at 13:26, Aymeric Vitte via bitcoin-dev <bitcoin-dev@lists.linuxfoundation.org> wrote:

I know this list is not to advertise personal projects but
https://peersm.com/wallet might be of some interest, this is the web
interface for https://github.com/Ayms/bitcoin-transactions since
apparently quasi nobody succeeds to use it

As far as I know (and surprisingly) this is the only online tool that
converts bech32 addresses (Sipa's one does not output something
understandable by everybody, the tool is using his code), the only one
that converts from any address to any address, maybe the only one that
decodes simply redeem scripts and probably the only one that allows to
create transactions by its own (the advanced mode is not implemented for
now but will be soon)

Ideally it should be an offline tool if there is some incentive to do
so, so of course it is not advised to use his private keys for now

Maybe they are mistaken but some users are reporting invalid bech32
addresses from their Electrum wallet, after segwit, bech32 confusion
seems to be the topic of the moment

Regards

Aymeric

--
Bitcoin transactions made simple: https://github.com/Ayms/bitcoin-transactions
Zcash wallets made simple: https://github.com/Ayms/zcash-wallets
Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets
Get the torrent dynamic blocklist: http://peersm.com/getblocklist
Check the 10 M passwords list: http://peersm.com/findmyass
Anti-spies and private torrents, dynamic blocklist: http://torrent-live.org
Peersm : http://www.peersm.com
torrent-live: https://github.com/Ayms/torrent-live
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms

_______________________________________________
bitcoin-dev mailing list
bitcoin-dev@lists.linuxfoundation.org
https://lists.linuxfoundation.org/mailman/listinfo/bitcoin-dev

-- 
Bitcoin transactions made simple: https://github.com/Ayms/bitcoin-transactions
Zcash wallets made simple: https://github.com/Ayms/zcash-wallets
Bitcoin wallets made simple: https://github.com/Ayms/bitcoin-wallets
Get the torrent dynamic blocklist: http://peersm.com/getblocklist
Check the 10 M passwords list: http://peersm.com/findmyass
Anti-spies and private torrents, dynamic blocklist: http://torrent-live.org
Peersm : http://www.peersm.com
torrent-live: https://github.com/Ayms/torrent-live
node-Tor : https://www.github.com/Ayms/node-Tor
GitHub : https://www.github.com/Ayms