Hey hey, dear #[0] #[1] #[2] #[3] π€
Is there any possibility to implement 2FA to #nostr?
W it shines for me that would make the protocol unbeatable in terms of security.
Sorry if this question makes no sense π
Login to reply
Replies (9)
If so, it will have no sense, of course.
On the other hand, if it could be used as a second layer proof?π But then any activity should be signed with both the private key and TOTP, I believe. And also it is questionable if you can have several authenticatee relays...
So it will make no sense, or?
Dunno, you should propose a NIP on how your idea should work. This is an open protocol and I donβt have all the answers π€
Thank you, I see π«
Even though I never coded anything more complex than a 'Hello world' message, I'll dig into this topic and maybe even propose a NIP π€
Have a great weekend βοΈ
It makes no sense because 2FA is just a second password you give to a centralized entity.
But it is an interesting idea if you think you could have a key that is split in two and a server keeps half and only signs your events once you provide 2FA auth to it.
Perhaps a non-shitcoin custody use case for MPC actually.
Yeees, that would be killer, right?
Because now I'm a bit scared every time I am putting in my private key into amethyst, astral, or whatever.
You can implement it as MuSig. Your second factor is just another signer in a 2-of-2.
I'm not sure that the relays are ready to retrieve multisig. Anyways it shines really promising.
What I thought was to put all relays on a chain (bitcoin or sidechain) so they add some crucial data simultaneously.
For example, if the user wants to have 2FA - this data would be added to the next block so all relays accept messages from this user only signed with 2FA.