Thread - Nostr Hypermedia

fiatjaf _@fiatjaf.com 2 months ago

How to add Google login to your app without having private keys in your app or handing them to Google:

viewsource.win

A very dry demo of its capabilities:

pomegranate demo

At its core it's a bunker powered by FROST threshold signatures. Supported now in https://nostrord.com/,

Jumble

A user-friendly Nostr client for exploring relay feeds

and https://hallway0.netlify.app, with others incoming. If you already have NIP-46 bunker support this becomes very easy to implement, there is a step-by-step flow in the README there that even an LLM can follow.

Replies (16)

Geek geek@getalby.com 2 months ago

what are you looking for from operations?

1 replies ↓

fiatjaf _@fiatjaf.com 2 months ago

What do you mean?

Silberengel silberengel@gitcitadel.com 2 months ago

Have you seen this, @ChipTuner ? Bunker sharding. Interesting concept.

2 replies ↓

Silberengel silberengel@gitcitadel.com 2 months ago

@fiatjaf I'm adding support for this and will launch a coordinator. I was about to add a #cordn coordinator, so I'll just do both at once. I already support bunker, but my app is specialized in flaky Internet connections, so what I need to do is add queued signing to the queued publishing, since the signers are all online. Shouldn't be too bad.

1 replies ↓

ChipTuner ChipTuner@gitcitadel.com 2 months ago

Saw this post but haven't looked into this. I remember @Niel Liesmons was trying to explain some of this stuff in the spring to me.

ChipTuner ChipTuner@gitcitadel.com 2 months ago

Can't see the docs because of course it's using some site that my privacy settings won't allow. Is this something your jumble can render?

3 replies ↓

Silberengel silberengel@gitcitadel.com 2 months ago

You mean the git? Here is a mirror: https://git.imwald.eu/silberengel/pomegranate

1 replies ↓

Silberengel silberengel@gitcitadel.com 2 months ago

View article →

View quoted note →

ChipTuner ChipTuner@gitcitadel.com 2 months ago

I assumed there was a spec somewhere?

fiatjaf _@fiatjaf.com 2 months ago

Actually you do have to create the private key in your app if the user hasn't registered any yet. I'll look into implementing a decentralized key generation algorithm into this.

fiatjaf _@fiatjaf.com 2 months ago

It will be good to test the flow with a different coordinator (central) if we do the thing in which a user publishes an event with their address and pointing to what central server they're using, so they can login using their own even if an app defaults to one specific central server. Are you also going to run a signer (operator), because it would be nice to have another one to rely on.

1 replies ↓

fiatjaf _@fiatjaf.com 2 months ago

What site your privacy doesn't allow?

viewsource.win

my humble hand-coded NIP-34 viewer? Why?

1 replies ↓

Silberengel silberengel@gitcitadel.com 2 months ago

I could run one, yeah. More than one would be a bad idea, as it would recentralize the shards.

FreedomTech freedomtech@zaps.lol 2 months ago

Why have a Google login at all? Seems counter productive to the freedom tech cause with all the surveillance they commit. Host your own Nextcloud. That replaces all their services except email, and there are plenty of privacy options for email.

ChipTuner ChipTuner@gitcitadel.com 2 months ago

Is there a spec somewhere? I just see implementation.

FreedomTech freedomtech@zaps.lol 2 months ago

Nostr is definitely better than Silicommie Valley social media. You do you. I'm a purist. I personally will never onboard anyone through a Big Tech login.