Enki (npub1gnw…errq) Hi Sovit! I forked keytr and made passkey support for Pubky using your NIP-K2 spec. After some feedback, it has come to my attention that using KiH is actually quite insecure.
Please look at this discussion for details: https://pubky.app/post/cg991c3itgsgbqj34uoisy8gf7a5oinsw76xxek6outsfu577fro/003575G34P5W0
here is my repo if you'd like to take a look!
https://codeberg.org/opensourcery/pubky-passky
I am looking into alternatives. I am thinking a potential solution could be for the user to provide a passphrase which will then encrypt the key and the encrypted key will be placed in the user.id
Please let me know your thoughts!
