I have read everywhere that exposing personal over rpc is dangerous and is vulnerable. The question is HOW?
Secondly, I don't understand if it's a security threat, how are some coins based on Ethereum are able to provide their own wallet? They must be using RPC api to connect to geth. Isn't their coin at risk?
I am also building a web interface for my coin using web3.js so that users of my coin could use web to access their accounts and carry out transactions but for that I need to expose personal over RPC. Am I compromising security? If yes, what else I can do to provide web access to my users of their accounts.
Can -rpcaddr and -rpccorsdomain help in any way? I couldn't understand their use properly. If I set --rpcaddr "ip1", "ip2" --rpccorsdomain "ip1", What does this means?