Merge pull request #141 from defuse/link-to-threat-model

Add known areas for improvement to the README
This commit is contained in:
Kevin Gorham 2020-06-10 12:44:41 -04:00 committed by GitHub
commit f38ba85e6a
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 10 additions and 4 deletions

View File

@ -1,7 +1,13 @@
# zcash-android-wallet
Android wallet using the Zcash Android SDK that is maintained by core developers.
Please see the [wallet app threat
model](https://zcash.readthedocs.io/en/latest/rtd_pages/wallet_threat_model.html)
for important information about the security and privacy limitations of the
wallet.
There are some known areas for improvement:
- Traffic analysis, like in other cryptocurrency wallets, can leak some privacy
of the user.
- The wallet might display inaccurate transaction information if it is connected
to an untrustworthy server.
See the [Wallet App Threat
Model](https://zcash.readthedocs.io/en/latest/rtd_pages/wallet_threat_model.html)
for more information about the security and privacy limitations of the wallet.