Welcome to our community.

In this community, you can submit ideas, vote on existing ideas, or add comments.

To submit an idea, please click the Submit New Idea button at the top of the navigation sidebar. You will then be asked to add a title and choose a campaign for the new idea. You will also have the option to add tags to the idea. To vote on an idea, simply click the up or down arrows to the right of the idea title/description. And to add a comment, click in the box below the idea.

If you would like to see all ideas created with a specific tag, you can click on the word or phrase via the tagcloud in the navigation sidebar area under "What we're discussing". You can also view ideas sorted by Campaigns from the right navigation area. To return to this page, click the All Ideas link.

kudos icon +

CleverCoin exchange

Yubikey 2FA

I always feel you should protect money with more than just a static password. I already saw that CleverCoin already supports Google Authenticator for two factor authentication. This is a good thing. But sadly Google Authenticator isn't open source anymore since version 2.21 although google Authenticator is still conform to support TOTP(RFC 6238) there is no guarantee it will in the future. So i suggest to add a alternative... more »


1 vote
kudos icon +

CleverCoin exchange

Content Security Policy HTTP header

The Content Security Policy(CSP) header reduces the damage that can be done when there is a unauthorized content inject or cross site scripting vulnerability and can help CleverCoin automatically detect it.
There is currently(sep 2014) at most 76.51% browser support for it. source: http://caniuse.com/#feat=contentsecuritypolicy

usefull links:
Here's a wizard to help define the CSP header: http://cspisawesome.com
Official... more »


0 votes