A key point here is that the #nauth protocol uses https/TLS as a publicly available road - not as the secure delivery vehicle as does #OAuth.
This is basically a state/agent-resistant protocol. Using relays as the secure transmittal backbone, it can punch through, route around anything.
View quoted note →
Login to reply
Replies (3)
Is this in the safebox repo already? I could use something like nauth for a couple projects. I started work on something similar but looks like you already nailed it.
It’s still a quivering mass of code. I need to spec it out more formally. It’s more of a scheme than a protocol. I need to add in the extra step for the PQC KEM, but you can get the gist here

GitHub
safebox/docs/NAUTH-PROTOCOL.md at dev-quantum · trbouma/safebox
Nostr SafeBox. Contribute to trbouma/safebox development by creating an account on GitHub.
Perfect, this is awesome