Thread - Nostr Hypermedia

made a thing: Signet - a native remote signer for nostr. your key lives encrypted (NIP-49) inside a small daemon on your machine. apps request signatures over NIP-46, and every single request waits for an explicit approve/deny in a native macOS app. the key never enters the GUI, let alone a client. works over public relays, including ones behind NIP-42 auth.

GitHub

GitHub - zig-nostr/notary: A native signer for Nostr. Your key stays on your machine.

A native signer for Nostr. Your key stays on your machine. - zig-nostr/notary

Replies (2)

Josh favillakey.io 1 month ago

Nice. Sign only mode that blocks nip44 decrypt is a good idea. been building a nip-46 bunker too, but in hardware, secure element and physical buttons. Good to see it attacked from the software side.

1 replies ↓

Sep _@zignostr.com 1 month ago

interesting! just ping me if you need help for software layer. we can prototype "Signet Box" with some changes in the existing Signet because: the daemon is headless, the secret key stays inside the daemon, the GUI is a separate approval process, requests can be held for explicit approval, the daemon connects directly to Nostr relays.