iris
Post
View thread root →
User Avatar
Repulsive Cuckoo
No, the problem with NIP-07, NIP-46 and NIP-42 is that all of them require signatures. Requiring a signature comes with the burden of key-management. Either your app accesses keys directly (unsafe) or you use a signer / extension (friction). With this using npub.cash becomes as easy as operating a single nostr client. No additional software required. NIP-46 and NIP-07 logins are still possible. OTP is not mandatory, but complimentary
0
0
jimbocoin 🃏
In order to decrypt the DM, the client must have control of the private key. But yes, they don’t have to sign anything—just prove that they have the private key to decrypt the DM. I guess the question is whether your service wants to run its own relay. If you’re running your own relay, the client *should* automatically respond to a NIP42 auth request transparently without the user having to do anything. If you’re not running your own relay, then NIP42 connection-level auth won’t help you.
0
0
0