Oddbean new post about | logout
▲ ▼
Vveerrgg | 17 days ago (raw) | export | reply | flag +1 
 question for #askNostr ... would you be more likely to login via DM login-code sent to your public key account rather than entering your #nsec ? 

I'm trying to NOT ask for nsec keys, and also trying to make it as light as possible to validate and use the app I'm designing. 

thoughts? suggestions?
▲ ▼
brugeman | 17 days ago (raw) | root | parent | reply | flag 
 DM login is way easier for people using native apps (Damus/Amethyst), and those are the majority. But with DM-login you don't really have access to keys and can't sign/encrypt anything, so this approach only works for a limited set of apps.
▲ ▼
Vveerrgg | 17 days ago (raw) | root | parent | reply | flag 
 Oh that’s a good point. 

My thoughts were to encode any activity that would require signing to be via URL that would send them back to their native messaging app to send from that … sort of like how “share via … “ works. 

… or at least that’s my work around for now.
▲ ▼
Vveerrgg | 17 days ago (raw) | root | parent | reply | flag 
 … been figuring if it’s possible to turn everything into url-links & API calls… that on the other side we’d all figure & find the right integration. 

I wanna get rid of user management activities & focus on use case / feature-function flows.