Hey hey, dear #[0] #[1] #[2] #[3] 🀟 Is there any possibility to implement 2FA to #nostr? W it shines for me that would make the protocol unbeatable in terms of security. Sorry if this question makes no sense πŸ™

Replies (9)

If so, it will have no sense, of course. On the other hand, if it could be used as a second layer proof?πŸ™„ But then any activity should be signed with both the private key and TOTP, I believe. And also it is questionable if you can have several authenticatee relays... So it will make no sense, or?
Thank you, I see πŸ«‚ Even though I never coded anything more complex than a 'Hello world' message, I'll dig into this topic and maybe even propose a NIP πŸ€™ Have a great weekend β˜€οΈ
It makes no sense because 2FA is just a second password you give to a centralized entity. But it is an interesting idea if you think you could have a key that is split in two and a server keeps half and only signs your events once you provide 2FA auth to it.
Yeees, that would be killer, right? Because now I'm a bit scared every time I am putting in my private key into amethyst, astral, or whatever.
I'm not sure that the relays are ready to retrieve multisig. Anyways it shines really promising. What I thought was to put all relays on a chain (bitcoin or sidechain) so they add some crucial data simultaneously. For example, if the user wants to have 2FA - this data would be added to the next block so all relays accept messages from this user only signed with 2FA.
↑