I haven't used anything FROST-based, but I think I would if I could do it in a way that seems more secure than regular NIP-46, and convenient to use.
For it to be more secure than regular NIP-46, I would want to require all shards for signing and keep exclusive control over at least one shard myself. If there isn't anything in the cryptography underlying FROST which makes it inherently less secure than using an unsharded key, it seems that this way of using it would be at least as secure as regular NIP-46.
And then on the convenience side, the actual signing would ideally be controlled through an app that sits on my phone and feels generally like Amber, and that app should probably hold one of the shards over which I have exclusive control.
I've only taken a cursory glance at FROST, but if there is something that provides this kind of experience or something equivalent, I think I'd try it.
Login to reply
Replies (1)
Yes, it is more secure to not have a central server that you trust to not sign bogus events in your name. But then it doesn't work with any Nostr app.
By doing it with a central server that speaks NIP-46 one can reuse their Google/Pomegranate bunker URI in any app, even if that app doesn't support the thing directly.
But Pomade does the signing locally if I remember correctly, you could look into that. It is deployed on Flotilla.
And there is FROSTR (which has been renamed, probably, to Igloo or something else) for the full self-sovereign setup in which you run all the things. They have an Amber-like app that does the signing in your phone.