Thread

Zero-JS Hypermedia Browser

Relays: 5
Replies: 58
Generated: 16:03:00
GM Nostr! 🌞 🎁 Announcing Keycast πŸ”‘ A remote signing platform for teams. https://share.cleanshot.com/y4XbqKpT Remote signing (NIP-46) has always had a lot of promise. Apps like Amber, nsec.app, and others have made it possible to manage your nostr keys in a way that is safer than browser extensions or pasting your nsec around the internet. BUT, none of them catered to teams. Groups like nostr:npub1nstrcu63lzpjkz94djajuz2evrgu2psd66cwgc0gz0c0qazezx0q9urg5l and nostr:npub19mduaf5569jx9xz555jcx3v06mvktvtpu0zgk47n4lcpjsz43zzqhj6vzk and many many companies out there are just sharing the main account nsec between different people and using it in different apps. A recipe for disaster. Keycast aims to finally fix this. It allows you to: - Manage teams of nostr users - Manage multiple keys that you want to give others access to - Create authorizations for those keys that grant specific permissions that can be changed, revoked, etc. - Create your own custom permissions - Run the signing infrastructure without any extra work And do it all in a self-sovereign way. Keycast is meant to be run on your server, by you. I think it's tremendously important that this sort of tool doesn't exist as a hosted service (which would basically be a huge key honeypot over time). The app is both a management web app AND a backend process that manages sub-processes that listen for remote signing requests, check permissions, and sign events. There is a basic docker setup to start, but my goal is to have this easily deployable to StartOS, Umbrel, Podman, and others. Code here: https://github.com/erskingardner/keycast
2024-12-24 08:35:34 from 1 relay(s) 36 replies ↓
Login to reply

Replies (58)

Great Job JeffG! nostr:nevent1qqsg40t47z5pc40tcnjw2ya97vjv6uweqcmvdzugg50l8dqdp38j7yspz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygqh88vn0hyvp3ehp238tpvn3sgeufwyrakygxjaxnrd8pgruvfkaupsgqqqqqqsnhr8hv
2024-12-24 09:35:50 from 1 relay(s) ↑ Parent Reply
I suspect nostr:npub1zuuajd7u3sx8xu92yav9jwxpr839cs0kc3q6t56vd5u9q033xmhsk6c2uc is working on a windows machine. since thats the only OS I know of that does not have case sensitive file names πŸ˜€ Also I cloned the repo and the files where missing the new line at the end of the files
2024-12-24 16:01:24 from 1 relay(s) ↑ Parent 1 replies ↓ Reply
Very odd. File explorer and terminal were showing the uppercase spelling but my guess is that I had it wrong early, changed it, and for some reason git was still tracking it in the old case without changing it... πŸ€·β€β™‚οΈ I'll push a fix (for a few things I found since announcing πŸ€¦β€β™‚οΈ) sometime soon. For now, it's Christmas time. πŸŽ…
2024-12-24 16:49:33 from 1 relay(s) ↑ Parent Reply
A few questions I had for a friend - Are secret keys loaded into the same address space as the process running an http server? - Are secret keys stored in plaintext or reversible encryption accessible to the process running an http server? - Are secret keys stored in a file readable by the http server process? What is a public url of a hosted version one might play around with? Again asking for a friend.
2024-12-24 17:45:23 from 1 relay(s) ↑ Parent 1 replies ↓ Reply
The answer to all three is what you don’t want to hear. For v1 I’ve left a lot to desire. Keys are encrypted at rest but fetched/decrypted by the same process running the http server (but not from any of the http methods directly).
2024-12-24 21:42:28 from 1 relay(s) ↑ Parent Reply
I'm looking for teams or companies that are looking to test Keychat out. Deployment via Docker should work well so if your team or company is willing to run a VM or install this on a server you already have, let me know. I'm happy to help you walk through the setup. nostr:nevent1qvzqqqqqqypzq9eemymaerqvwdc25f6ctyuvzx0zt3qld3zp5hf5cmfc2qlrzdh0qqsg40t47z5pc40tcnjw2ya97vjv6uweqcmvdzugg50l8dqdp38j7ys59sssx
2025-01-05 09:57:08 from 1 relay(s) ↑ Parent 3 replies ↓ Reply
Yo nostr:nprofile1qy2hwumn8ghj7ct4w35zumn0wd68yvfwvdhk6qghwaehxw309anxjmr5v4ezumn0wd68ytnhd9hx2qgdwaehxw309ahx7uewd3hkcqgswaehxw309ahx7um5wgh8w6twv5q3samnwvaz7tmswfjk66t4d5h8qunfd4skctnwv46qzynhwden5te0wp6hyurvv4cxzeewv4esz9rhwden5te0wfjkccte9ejxzmt4wvhxjmcprfmhxue69uhhyetvv9ujuem9w3skccne9e3k7mf0wccsz9thwden5te0wfjkccte9e4x2enxvuhxv7tfqyt8wumn8ghj7un9d3shjtnwdaehgu3wvfskueqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqgcwaehxw309aex2mrp0yh8xmn0wf6zuum0vd5kzmqqyqtnnkfhmjxqcums4gn4skfccyv7yhzp7mzyrfwnf3kns5p7xymw7a3kzv7 it would be amazing to have you on this call! I'd love the fact that the freedom tech community is getting into healthcare which needs to be fixed, just like our money. Solutions like Keycast will play a pivotal part in this. note1lnh3q6648ysulrx2pgeyhv2cqqle9vftdxalq3yqkqa7c89eljtqyr70nl
2025-01-10 08:42:35 from 1 relay(s) ↑ Parent 1 replies ↓ Reply