Regarding browser addon for signing Nostr messages:
Is it worth it to have a manual approval each time you have to sign something? I'm thinking of a PIN or even a password.
The idea is that the private key is stored encrypted without the extension to know the encryption key. So each time you need to sign something you, the user, need to enter that encryption key. It could be in the form of a PIN or a password, which you have to enter every time.
Does it make sense? is it too much?
GitHub discussion here:
https://github.com/diegogurpegui/nos2x-fox/issues/11
Diego Gurpegui /
npub168…3926e
2023-02-20 01:19:19
Author Public Key
npub168nqgewzkamnyh53x0epqrftkv2pdh9gzr6558v4vetzr3w7uxfs63926ePublished at
2023-02-20 01:19:19Event JSON
{
"id": "7d3db1f8e97f1738f525d4e70a2d93385b3a5f8e71d9db33c667bfeae057ab38",
"pubkey": "d1e60465c2b777325e9133f2100d2bb31416dca810f54a1d95665621c5dee193",
"created_at": 1676855959,
"kind": 1,
"tags": [],
"content": "Regarding browser addon for signing Nostr messages:\nIs it worth it to have a manual approval each time you have to sign something? I'm thinking of a PIN or even a password.\nThe idea is that the private key is stored encrypted without the extension to know the encryption key. So each time you need to sign something you, the user, need to enter that encryption key. It could be in the form of a PIN or a password, which you have to enter every time.\n\nDoes it make sense? is it too much?\n\nGitHub discussion here:\nhttps://github.com/diegogurpegui/nos2x-fox/issues/11\n",
"sig": "798ce56799e586a6bb424944d883284e9e211fd3173bb2e1a5a34cae8f498d21d75da6ac63ec58f52b872138035350e2b1e287e2c6fb4049d82e9e62872cbb67"
}