Sjors on Nostr: How defensive do you want it? ...

How defensive do you want it?

quoting
nevent1q…t5hc

I don't the un-FOSS-ness was a critical factor, because Google Zero and Ledger will happily look at it for the opportunity to find a bug. That said, it's worth considering whether FOSS needs to be a minimum security requirement for critical code paths.

But remember that the secure enclaves are proprietary black boxes. So you'd have to treat them as unsafe and somehow get enough entropy to be cryptographically secure without it. That's a bar no hardware wallet today meets, afaik.