Replies (16)

ocknamo（早く寝ろ） ocknamo@ocknamo.com 7 months ago

たれかクライアントに組み込んでみてもらえると嬉しいかも

ocknamo（早く寝ろ）

nosskey-sdkというnosskeyをTypeScriptで簡単に実装できるSDKを公開しています。 nosskey-sdk@0.0.0

GitHub

GitHub - ocknamo/nosskey-sdk: SDK for Passkey-Derived Nostr Identity a.k.a. Nosskey

SDK for Passkey-Derived Nostr Identity a.k.a. Nosskey - ocknamo/nosskey-sdk

View quoted note →

teatwo _@studio.teatwo.dev 7 months ago

v0.0.0おめです🎉

1 replies ↓

ocknamo（早く寝ろ） ocknamo@ocknamo.com 7 months ago

ありがとうございます✨

1 replies ↓

Cody cody@jumble.social 7 months ago

I think I'll integrate it into Jumble

4 replies ↓

idsera idsera@blitzwalletapp.com 7 months ago

What is this?

1 replies ↓

idsera idsera@blitzwalletapp.com 7 months ago

Ah ok, understood, haha

Keychat 7 months ago

Nosskey is likely a better solution than NIP-46.

npub1v654...zlnm 7 months ago

Pico Keys

Pico Fido - Pico Keys

An open source Hardware Secure Module in your hands. Keep your private and secret keys safe with Pico HSM.

npub1v654...zlnm 7 months ago

GitHub

GitHub - lnbits/nostr-signing-device: Signing device for Nostr

Signing device for Nostr. Contribute to lnbits/nostr-signing-device development by creating an account on GitHub.

npub1v654...zlnm 7 months ago

GitHub

GitHub - jocover/esp32_u2f: Create a FIDO2/U2F token using ESP32

Create a FIDO2/U2F token using ESP32. Contribute to jocover/esp32_u2f development by creating an account on GitHub.

Garbage nsec garbagensec@NostrAddress.com 7 months ago

Great! How about for native apps, could it work via a webview ?

2 replies ↓

ocknamo（早く寝ろ） ocknamo@ocknamo.com 7 months ago

If the webauthn api is supported, you can use it. When I checked in the past, I think IOS was ok but not Android. It would be great if someone made a sdk for native apps!

2 replies ↓

Niel Liesmons 7 months ago

:110percent:

1 replies ↓

Garbage nsec garbagensec@NostrAddress.com 7 months ago

Cool, nice research! For the secret caching settings, if you store the key in memory for a long while (so you don't have to FaceID for every post or message, I presume) how safe is it there do you think?

1 replies ↓

ocknamo（早く寝ろ） ocknamo@ocknamo.com 7 months ago

It is the same as if the private key remains on the client. This means that if malware breaks into the system or someone steals the device, the private key is at risk of being stolen.

ocknamo（早く寝ろ） ocknamo@ocknamo.com 7 months ago

FYI.

Android Developers

Authenticate users with WebView | Identity | Android Developers