Many people seem to have worked on this, why don't you mention any actual project?
brugeman
artur@nostr.band
npub1xdtd...ntxy
Building https://npub.pro https://nsec.app and https://nostr.band
Create beautiful nostr-based websites with Npub.pro
Store your nsec in a secure enclave!
We've spent a big part of 2024 trying to make a reliable non-custodial signer with nsec.app. It hasn't worked out perfectly - remote access to keys stored on a mobile device is still unreliable, especially on iOS.
That's why we got very interested in AWS Nitro Enclaves - h/t @Marks and MapleAI team for inspiration!
The idea is to have an open-source custodial signer and deploy it in an isolated environment that provides attestation for the deployed code. Anyone would be able to reproduce the code build and verify that the signer is running the correct code in a safe environment.
So here it is:
Each instance of a signer deployed in an enclave announces itself on Nostr. We added some Nostr to attestation provided by AWS - the report is linked to pubkeys of a person building the code image, and a person running it. This way you can choose a signer based on your own preferences.
It's already integrated into nsec.app, go to Settings => Secure enclave and try to upload your keys to the server. The signer API is described in README.
DO NOT deploy your real keys just yet - it's running in a production environment, but the code hasn't been well audited yet. First we need some community members to review the code and reproduce the code image.
The signer can also be used to generate throwaway keys for automated testing of nip46 implementations, check out "generate_test_key" method.
Looking forward to your feedback!
(Signed by my nsec from the enclave)
GitHub
GitHub - nostrband/noauth-enclaved: A safe Nostr nip46 signer to be deployed on AWS Nitro Enclave
A safe Nostr nip46 signer to be deployed on AWS Nitro Enclave - nostrband/noauth-enclaved
DO NOT deploy your real keys just yet - it's running in a production environment, but the code hasn't been well audited yet. First we need some community members to review the code and reproduce the code image.
The signer can also be used to generate throwaway keys for automated testing of nip46 implementations, check out "generate_test_key" method.
Looking forward to your feedback!
(Signed by my nsec from the enclave)@DETERMINISTIC OPTIMISM ๐ are there api docs for datamachine?
@bumi hi is there an API for albyhub so that I could launch a new local instance and set it up and add sub wallets etc all from cmd line without touching the UI? preferably without relays - need it all to run locally, sub wallets accessed locally