Add security filters to the "Find wallet" page about ethereum-org-website

[konopkja]

Hello, great to see this initiative here!

On the complexity note:
Yeah i think we would prefer merging this into 1 - 3 groups (doesnt have to be just one, but also can be if it makes sense).

Re numeric value:
We can tweak the designs so that this value is prominently visible on each listing if the community agrees on this improvement!

Question
I think right now this audit is focusing on subset of wallets on our page, which is already super helpful, but woudl it be possible to extend it to all walets? If not it may require a more subtle design choice i think

[matiassequeira]

I think right now this audit is focusing on subset of wallets on our page, which is already super helpful, but woudl it be possible to extend it to all walets?

@konopkja We have already covered all the EVM-compatible browser extension wallets listed on ethereum.org. We are currently working on the rest of the mobile wallets (iOS and Android), and the results should soon be ready. So yes, we will test all the wallets listed on ethereum.org site.

How often were you thinking about testing/reviewing these wallets? And were their any criteria you used to determine the initial set of wallets you investigated?

@wackerow We definitely plan to periodically re-review the wallets. Our current goal is to retest once per quarter as long as the number of wallets remains manageable by our team. Additionally, as mentioned above, the scope was set to be all the wallets listed on ethereum.org, although we could include more in future iterations.

[wackerow]

Hey @matiassequeira, really appreciate your post and ideas. Personally agree with much of what is proposed here as I'd love to offer more in terms of security options.

So you're proposing using the data collected from the Coinspect investigation? How do we see this data being maintained over time? How would we account for wallets that are not in this data set?

@konopkja Any thoughts on this potentially making things overly complex for users?

[matiassequeira]

Hi @wackerow, glad you liked it!

To answer your questions, we'll use the data we collected and keep it updated. We can commit to periodically testing a maximum number of wallets and establish clear criteria for accepting new ones for testing.

Regarding UI complexity, we can alternatively add only one security category, such as "Security Score Above X" instead of all those new filters we proposed earlier. In this case, we'll also add a link to a website with all the details about how we calculate the score, including the testing process.

[wackerow]

I think right now this audit is focusing on subset of wallets on our page, which is already super helpful, but would it be possible to extend it to all wallets?

@matiassequeira Curious your thoughts on this. How often were you thinking about testing/reviewing these wallets? And were their any criteria you used to determine the initial set of wallets you investigated?

I think this would be a great addition, but just want us to be aware we'd be introducing a new dependency.