Oddbean new post about | logout
▲ ▼
Rico | 10 months ago (raw) | root | parent | reply | flag +3 
 Has somebody come up with a multisig nsec setup yet, where n/x keys need to sign an event before its fully decrypted and published?
▲ ▼
corndalorian | 10 months ago (raw) | root | parent | reply | flag +1 
 The only thing I’ve seen is this. But I’ve never seen it used or much talk of it. 

https://github.com/nickfarrow/frostr
▲ ▼
Rico | 10 months ago (raw) | root | parent | reply | flag +2 
 Thank you! 
To make it right, the event can't be floating around the relays before all signatures have signed it. Otherwise it defeats the purpose, thinking about a companies blog or government announcement channel that needs checks and balances. So all signers either need to use the same computer, or the half signed event thats been send through relays has to be encrypted.
▲ ▼
corndalorian | 10 months ago (raw) | root | parent | reply | flag +1 
 Also have a look at nsecBunker by @PABLOF7z . Not multisig but it allows for managed access/use of a Nostr key. A few clients have implemented support. 

https://nsecbunker.com
▲ ▼
furio | 2 months ago (raw) | root | parent | reply | flag 
 I think that’s overkill.
I think 2fa is probably good enough and much more user friendly.

Key stored in app, then on signing a pop up app or extension with second factor is secure enough.