I get that I just wanted to clarify things. If the anon feature has to rely on a single point that is the API server, then it is by definition centralized. Not trying to take away anything from the devs or to fud but let's call things for what they are before people who don't know any better invest based on false information.
No mate it is a wrong view you have here. There is a complete network running subchain and different services! This Api is not the Anon system!! That is important to know!
edit: of course api is part of the complete network.
Bonus question. What will happend if navajo api server went offline ? Will wallet (new wallet, that didnt use anon transaction before) choose NMG by itself (data from main chain or subchains ?) or will it block annon transaction since api server is offline ?
Also, what if the sites' SSL private keys were compromised and all users' sessions were logged?
api does not hold any keys.
SSL priv key, so user sessions were logged.
you only can log data if you have access to the system. there alarm bell already is ringing...
That's my point. What happens if api.navajocoin.org is hacked?
mate I already anserwed before. Then we bring the host down and start the redundant service.
I don't know what your business is, but hacking is not that easy.
Me myself is working in Network security / network administration for a long time now and did several learning sessions with whitehats. And I put all the experience in this network!
But we will improve our system any time and always keep up to date!
regards