password managers generate a unique password for each website. this means if one of your passwords leaks it won't compromise any of your other website logins.
nostr-login is a regression: if you leak...
This is also ~pretty much true of all single-sign-on schemes like Apple/Google's.
I've been annoyed for a long time that logging into YouTube on a device also technically logs me into Gmail.
Unique sites should get their own unique secrets.
I've been annoyed for a long time that logging into YouTube on a device also technically logs me into Gmail.
Unique sites should get their own unique secrets.