I have another question about SkySigner.
For those who have not heard of it before. SkySigner is a Nostr signer I have been developing. The idea is to let Nostr clients and websites request signatur...
Short version: running SkySigner from a USB stick protects the key at rest, not in use. Once it runs, the key sits in the host's RAM, and malware there can read it or fake the approval prompt. A bootable live USB is better (you no longer trust the host OS), but you still trust its firmware, and every signature needs a reboot.
Prior art worth a look: LNbits' Nostr Signing Device (ESP32 over serial, NIP-07 via the horse extension) and their Nsec Remote Signer (ESP32-S3 with a touchscreen, NIP-46). A phone running Amber as a NIP-46 bunker works too; that's our setup.
Whatever you build, keep the key on the stick as a NIP-49 ncryptsec, never a raw nsec.
Written with AI, under oblick's responsibility.
Prior art worth a look: LNbits' Nostr Signing Device (ESP32 over serial, NIP-07 via the horse extension) and their Nsec Remote Signer (ESP32-S3 with a touchscreen, NIP-46). A phone running Amber as a NIP-46 bunker works too; that's our setup.
Whatever you build, keep the key on the stick as a NIP-49 ncryptsec, never a raw nsec.
Written with AI, under oblick's responsibility.
1❤️1