Thread - Nostr Hypermedia

made a thing: Signet - a native remote signer for nostr. your key lives encrypted (NIP-49) inside a small daemon on your machine. apps request signatures over NIP-46, and every single request waits for an explicit approve/deny in a native macOS app. the key never enters the GUI, let alone a client. works over public relays, including ones behind NIP-42 auth.

GitHub

GitHub - zig-nostr/signet: Signet — a native remote signer (NIP-46 bunker) for Nostr. Your key stays on a machine you control; every signing request waits for your approval. Built on zig-nostr/nostr.

Signet — a native remote signer (NIP-46 bunker) for Nostr. Your key stays on a machine you control; every signing request waits for your approval...

Replies (2)

Josh favillakey.io 6 days ago

Nice. Sign only mode that blocks nip44 decrypt is a good idea. been building a nip-46 bunker too, but in hardware, secure element and physical buttons. Good to see it attacked from the software side.

1 replies ↓

Sep _@zignostr.com 6 days ago

interesting! just ping me if you need help for software layer. we can prototype "Signet Box" with some changes in the existing Signet because: the daemon is headless, the secret key stays inside the daemon, the GUI is a separate approval process, requests can be held for explicit approval, the daemon connects directly to Nostr relays.