Damus
Open in Damus
Zhash · 1w
Late to the thread, but one angle I haven't seen yet: with NIP-46 the USB part is optional. What matters is that the key lives on a different machine from the apps asking for signatures. I run my own...
 Josh profile picture
Josh @Josh
Nice setup, and that last line is the bit that matters. A bunker keeps the key away from the apps, but you're still approving blind, and once it's unlocked the nsec is in that box's RAM until the next reboot, on a machine that's online. Encrypted at rest only covers you while it's locked.
2❤️1❤️1
Zhash · 1w
Fair, and I agree. It's a tradeoff, not a hardware signer. What narrows it for me: every app gets its own connection limited to a few event kinds and an hourly cap, so a compromised client can't sign a contact list or a zap it was never allowed to. Every signature gets logged (kind and app, never th...
SkyLords · 1w
My actual goal with SkySigner USB OS is to let people turn an ordinary USB flash drive they already have at home into a portable Nostr signer. The idea is that someone installs SkySigner USB OS onto a USB drive. When they first use it a vault setup screen appears where they can create and configure...