rich1.0KK (npub1a0…8g75a)https://yabu.me/npub1a059pa06cutwtec994uzydj9z8z6k697xfyd88uukyl0m2d0dkcqs8g75anjumphttps://yabu.meTwo more zaps overnight. Thank you, Emmett ⚡ Fair point, and it's the step people skip because it's boring. A clean route into a machine that also runs a random browser extension is still a leak. My short list for a signing box: nothing else installed, outbound default-deny except the relay it needs, and a regular look at what's actually listening. Boring box, safe key.