Pre-justifying some very opinionated changes coming to wisp, get ready Why am I removing functionality that's already built? More functionality = more bugs, more maintenance, more dependencies, less stability, more UX clutter Remote signing and local relays are gonna be deleted, please try not to hate me Or perhaps a brave soul will fork wisp from here to maintain a cypherpunk version, but I am clear in my mission to make the best normie client, and bunkers just ain't it

Replies (100)

BTC_P2P's avatar
BTC_P2P 1 month ago
I personally like simple software.
But that's the cool thing about Nostr. Clients are developer subjective. Devs can really show what they want to see in the world, no right way or wrong way. Just swap clients. Just nos2x that nsec and swing clients like it's the 70's again
Default avatar
Joe 1 month ago
So don't update and I can keep using amber to sign?
BTC_P2P's avatar
BTC_P2P 1 month ago
Muun wallet vs Zeus. I understand Zeus is much more performant but using Muun is so enjoyable (side note if Muun had coin control it would be 10/10)
Don't flinch, be the alpha contrarian of Nostr. Make the other contrarians tremble and question their contrarian positions.
Keeping local amber integration? Id hate to have to stop using the app because it forced me to enter my private key
What's the preferred sign in method you're going with? I still maintain that as long as the nsec doesn't leave the browser and is only process locally, there is no issue there.
Keep the remote signer option around, using them should be encouraged For new users they can generate and keep an nsec in the app and on a cloud backup Wisp is the only Android client besides Primal to have a built-in Spark wallet (although you could just install blitz/WoS/whatever spark wallet if you went to use another Nostr app)
I hate to see it go, but you do you. I have no room to be critical about it. It's your software, you're entitled to build it the way you see fit.
For people who log in with Google/Apple, where does the nsec get stored? Do you send it to Google/Apple?
Sorry, I don't quite understand. Like, it's deterministically derived from the Google/Apple account?
Is this because your trying to implement DMs and you need synchronous encryption and decryption methods?
That's where I'm headed with regarding my Discord alt as well, doing changes that other devs might not agree with, and the reason for that is the answer to the question: Who am I targeting? Answering that question led to very obvious answers to decisions throughout planning and development (one of which for example: MLS was overkill, so I dropped it and used LKH, and opting for event-based group design rather than relay-based group design)
Default avatar
G Force G 1 month ago
Maybe a plugin system is possible here. Normie by default but allow plugins (separate projects in themselves) can be selected at runtime by the user if they want to add additional functionality.
Hofer99's avatar
Hofer99 1 month ago
Personally I prefer they stay on X and bluesky. But nostr is for everyone.
I imagined seeing the remote sign option might give the nostr naive something to think about even as they proceed to click the Google/apple option. I wouldn't have thought it would be problematic to keep, but I'm also not a dev and wouldn't have known. I can see your rationale and still really appreciate your work
richard's avatar
richard 1 month ago
should normies paste their nsec on every nostr app they have installed? because i don't see what else to do if one's nsec can't be centralized somewhere (on iOS bunkers seem to be the only solution, whereas nip-55 does the job on android)
Hmm I was digging being able to dump everything into citrine
richard's avatar
richard 1 month ago
if remote signing is gone on wisp, primal will remain the best (pseudo-) client for "normies" period.
richard's avatar
richard 1 month ago
from a user pov, one of the biggest features of nostr is account portability. how do they get that if it means giving away their nsec to every app they try? is there even an actual implementation that's in production for big tech logins?
Tony Acid 's avatar
Tony Acid 1 month ago
pro users also can accidentally paste their nsec to an app that submits every letter to the cloud. maybe sleep a bit longer on that decision, and wait for better ideas to come up... hey, how about wisp plugins? ;)
Yea could work (and I’ve built the backend for that with universal links). But I totally get the decision, and I’ve tried helping out with nip-46 on Wisp. Thing is, @Clave is about a month old, the nip46 spec is poorly implemented by most clients (and unfortunately also by some Nostr libraries), and it’s not a good normie feature (yet). So if @utxo the webmaster πŸ§‘β€πŸ’» goal is to make a client for the masses then I agree that’s the right move. We’ll get a secure login for wisp iOS eventually but that’s a good feature for a future build/fork that we should perfect before expecting the mainstream to use.
Should add log in with Facebook Instagram etc. to create new account that clones your other social media and shares your notes as status updates. Now that would bring in some normies
Interesting counterintuitive idea. Normies will be normies, and nostr should be for everyone, just like Bitcoin. Presumably they'll have their nsecs included in Google/Apple/Planter databases.
Make it easy for normies to use your App then once everyone is ready you can add a choice of extra layers of security but asking a normie to download another App to sign into your App is asking to much right now !!!
Yep, and those people don't care. It makes no difference to the client if that's what people choose; they are still joining the protocol and many may not even be aware of it. That's good UX, especially because interoperability is baked in once they have a key.
You endanger a lot of people. People used those tools because 20 years ago Google still said they would "not do evil". Wisp sets these people up for failure in a highly adversarial environment. This is playing with the lives of people just like KYC is killing real people.
No, people endanger themselves. Either you get someone to frictionlessly sign-up or they don't sign up at all. Once they are in the ecosystem, if it means enough to them they can make a new key pair. No option is forced, people are free to make their own choices.
You have a responsibility when you hand sharp knives to 4 year olds (normies). You can waive away all responsibility fine. People often simply stick with their first account even more so after they invested some time into it. Psychological effects are real and if you know about those you want to educate people so they have a real choice. I doubt this will happen here.
JD's avatar
JD 0 months ago
But an option to remote sign is not what is preventing mass adoption or great UX. Is it? I agree with your premise but remote signing seems like an important step in the direction of sovereignty and such. Think on it. Who are you building Wisp for? Bitcoin Maxi's or Normies currently using Candy Crush and Bluesky?
JD's avatar
JD 0 months ago
LOL. πŸ˜’ haha. That app has keys stored in a Google Doc. Very secure.
Constant's avatar
Constant 0 months ago
How do you expect people to use nostr if not via bunker?
Not everyone should use a bunker, but deleting the option removes a pretty important escape hatch. The moment people want multi-device convenience without sliding back into app custody, bunkers start making a lot more sense.
tanel's avatar
tanel 0 months ago
introduce phone number also, similar to telegram or signal could be dope
Constant's avatar
Constant 0 months ago
did you investigate this? I think about 100% of your users used a signer/amber How about you leave Wisp alone and just create a second client called Cuckstr?
We don't have any users on nostr, I'm not building wisp so a few hundred of us have more choice, I'm building to try to onboard millions. And I know they won't be using signers. How about my code is free and open source and anyone can fork it? Why do I have to do everything?
Constant's avatar
Constant 0 months ago
So all the users that are using it now can keep using it without accidentally updating the app and not being able to use it anymore; And then separately you have another app you can go target those millions of users of yours with in a way the current user base wont notice anything of. I mean, its your app....but you are also the one going into a different breaking direction. So you could also just....not do that and come with a new appπŸ€·β€β™‚
Thanks for explaining your choices. Hopefully wisp will be forked for some bunker users like me. πŸ™Œ But totally respect, that you are free to go the way you like. Was very happy with the way wisp works. Just started trying it a few days ago. Instantly was my main nostr app. So heads up to the great work ✌️
↑