Why
At SteemSports we are implementing a form to take users private ACTIVE keys to make bets.
The key is used to sign in the browser, and then garbage collected. It is never sent to server, or saved in localStorage, etc.
However we also have chat, and images embedded from blockchain posts, and no full-time security experts. So I think that eventually someone will find a way to steal keys while they are inputted.
Therefore, it would be better to do payments on steemit.com
Solution
I propose a special secure page, that can take form values from URL, and pre-fills the payment form. Then, the only thing user needs to do is sign with their private key or password.
Example
This will pre-fill the payment form like this:
What this enables us to do
This allows us, and anyone else to simply generate payment links, and offer convenient payment options while reducing the risk of losing people's keys.
Thanks
I stole this idea from steemconnect. I think it would be really good if this feature made it into steemit itself. I have also opened the request on github