I was reading about bridging Ethereum and IPFS and I stumbled upon an article that uploads the file to IPFS and records the hash of it as an Ethereum transaction. I then tried to understand the difference between a smart contract and a dApp from this answer.

From what I understood, a smart contract is part of the blockchain and dApp is outside the system of blockchain. So, my question is, given a dApp that uploads your file to IPFS and records its hash on Ethereum's chain, would you trust this app as much as you would trust the Ethereum chain?

In case "trust" seems to be ambiguous, consider my question as follows: Would you consider this dApp as tamper-evident as Ethereum? Would you trust it to share your credentials to record a transaction on Ethereum?

Some reading material towards the following question would be much appreciated: What would be the ideal-most way(steps) to upload a file on ipfs and record its transaction on Ethereum if not this one?

  • You don't have to share your credentials... Noone should give his private key to a dapp.. you sign the transaction and give the signed transaction. A dapp should actually just provide the methods to interact with a smart contract.
    – Majd TL
    Feb 28 '20 at 8:48
  • and enable metamask to sign transactions for your dapp instead of asking for the private key, that is more trusted
    – Majd TL
    Feb 28 '20 at 9:13
  • Some dApps could be using a private backend that communicates with the smart contract and frontend, which is also probably private. I would be wary of centralized components of the dApp. Feb 29 '20 at 1:25

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.