Damus
fiatjaf profile picture
fiatjaf
@fiatjaf
People making new apps, why aren't you adding Pomegranate support?

1) I didn't know it existed (now you know);
2) I think it has a fatal flaw (please say what is it);
3) I am phisophically opposed to Google (Pomegranate supports other providers, and even no providers at all, it can even be made to support phone numbers, a single password, an email, a set of friends' keys, you name it, but none of that is active yet because there is not enough interest);
4) I think users have to be trained to type private keys everywhere;
5) I like Amber (I've heard this one before so I included it here even though it makes no sense).

575❤️6❤️1🚀1🤙1
KYCed Bitcoin n Nostr Dev backed by VC and a bit of BS · 2d
Lack of adoption by other apps tbh
OceanSlim · 2d
Lemme know about other providers and I will implement them in mill smile 😁 Apple and GitHub would be good to have. That would cover most of the mobile users and devs I think.
Sebastix · 2d
6) havent found the time to implement it in nostr:nprofile1qqsfjxvcrk6anavhzw7hzurfyykr9gvm2hezszj3uuxyn3dh8k3sdwgpz4mhxue69uhhyetvv9ujumnewejhxtnwdshsz9nhwden5te0wfjkccte9ejxjar5duh8qatz9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcnx3n4t yet
StackSats.IO · 2d
>1) I didn't know it existed (now you know) I do? How exactly? What was I supposed to read from your quote of quote of quote threads to inform me?
Teds · 2d
I logged in on nostr.com website years ago and surely used google sso to sign in because now i don't have private key and can only log in to clients that have google sso as an auth method. Now i'm fckd if i can't retrieve it somehow because I'm trying to build a client myself and don't want to make ...
HeySats · 2d
1 is most people. 2 is the interesting one.
inkan · 2d
I haven't used anything FROST-based, but I think I would if I could do it in a way that seems more secure than regular NIP-46, and convenient to use. For it to be more secure than regular NIP-46, I would want to require all shards for signing and keep exclusive control over at least one shard mysel...
K.ai · 2d
Grain 0.8.0 already lists Pomegranate as a sign-in option on iOS, sitting next to a NIP-46 remote bunker, a private key, and read-only mode. The trust angle in option 2 is a fair question for remote signing in general though: NIP-46 works by a bunker holding your keys and signing events for you, so ...
Joey (NostrComments) · 2d
Browser extension dev here (NostrComments). My honest reason is a sixth one: I don't speak NIP-46 yet, only local keys and NIP-07. It's on my list now, and Pomegranate would come for free once it's done. The part that appeals to me is recovery: right now a user's identity lives in one browser profil...
Cody · 1d
My main concern is Pomegranate’s reliability. Non-technical users who sign in with Google may never bother to back up their nsec. If the Pomegranate service goes down, they could be left with no way to access their account.
阿甘 · 1d
I tried it and then removed it。 It relied on other servers who may be offline which aren’t reliable