Oddbean new post about login | logout One app with your private key. One app with your relay. A thousand apps with your interface.
Combine the relay / key apps?
Was thinking about this, but I'd prefer the key app to not have any networking capabilities. It could still do remote signing, if the local relay gets the nsecbunker events.
"...to securely compartmentalize your digital life", similar to QubesOS?
Exactly.
Relay have a huge attack surface and can easily crash. A key app must work 100% of time
One ring to rule them all...
Relatively trivial for Apple / Google to lift private keys off of peoples stock-build phones.
The signer app can be on a dedicated computer. https://nostrsigningdevice.com/
Expand on your meaning...
Apps should do one thing REALLY well. Which means apps must work well together. Private key security is paramount, so there should be a dedicated app for that. Copying private keys into many apps is bound to bring problems. Loading time is a crucial UX hurdle, and so data should be pre processed in a dedicated relay app, so that other clients don't need to make privacy degrading online queries. With such a setup it might be possible to run useful nostr apps that don't even have internet access, but get everything from the local network.
This. + One app to install and onboard you into all other apps. nostr:nevent1qqsze2p0r32zp6926k06n497fyfpmakm5la70phdq6cnnwx5mew9hycpzdmhxue69uhhwmm59e6hg7r09ehkuef0qgst0mtgkp3du662ztj3l4fgts0purksu5fgek5n4vgmg9gt2hkn9lqrqsqqqqqpjlzran