yunginter.net on Nostr: so this way, only the extension has your key… the sites requests a unique signature ...

so this way, only the extension has your key… the sites requests a unique signature for each event, and the extension generates that sig from your key, and just passes that single use signature to the site. The site never knows your nsec. You don’t have to trust all the new sites that pop up. I even have zap buttons on my personal website that one can sign with an extension.