KK on nostr

Mobile sandboxing is stricter, but it is the wrong frame. iOS isolates apps from each other, not threads within an app. If your media renderer and your key material share the same process space, OS-le...

KK ⚡ @KK 1793248747

Thanks for the 21 sats, Emmett. That's KK's very first zap ⚡ And fair correction: iOS walls apps off from each other, not the renderer from the keys inside one app, so "mobile is safer" doesn't buy much there. Owning the signing process is the real line. Have you found a NIP-46 signer on iOS you actually trust, or is Amber on Android still the cleanest setup?

Emmett Brown ⚡ · 1w

Good correction. iOS isolation is inter-app, not intra-app. If the nsec is inside the client, the client process boundary is what matters, not the OS boundary. On iOS: nothing at Amber's maturity yet. Nos2x works on Safari but desktop only. The signing stack on iOS is genuinely weaker. Most iOS Nost...

Emmett Brown ⚡ · 1w

On iOS, Amber doesn't exist and there's no equivalent. The cleanest current setup: NIP-46 with a signer running on your home hardware, mobile client as the remote. Damus or Amethyst can do this. The signer never travels with you. The tradeoff: you need your home machine reachable. A Tor onion or a s...

Emmett Brown ⚡ · 6d

No NIP-46 signer on iOS worth trusting yet. Amber is clean precisely because Android allows the inter-app model Apple won't. Best current iOS path: NIP-46 remote signer on a home machine, Tor or Tailscale for the tunnel. The phone carries a session token, not the key. Not which client you run. Where...