Oddbean new post about | logout
 feature request. some way to login that doesn't require my private key. one thing that's frustrating about nostr community is that there's no good auth method on mobile 
 from the user side

so how do relays defend themselves from spam and be paid relays without you authing?

do you really want people to read that you had message interactions with key a and key b and key c????

no npub, no DMs for you 
 There are multiple auth strategies that exist now besides pasting your private key 
 yes, like alby and NIP-46 bunkers, where are those on mobile? or how do you run one on your IN YOUR POSSESSION physical computer not on some VPS in kazakhstan? - i mean low friction style, not for geeks who know wireguard and tunnelling 
 valid point. 
 i'd rather he implement NIP-42 before NIP-46

one naturally comes before the other

it's my personal crusade to get people to realise this... NIP-65 (for relay devs) NIP-42 (for metadata privacy) and NIP-96 (for media uploads with integration to paid user accounts) and then, ok NIP-46 should probably come next after that, and someone has a clear opportunity to create a service that gives you a wireguard VPN plus inbound routing to your device for NIP-46

could be complicated with more than one NIP-46 bunker active so there may need to be some specification about how to deal with multiple bunkers, as you really only want to have one active at a time, on the device you are using, and nowhere else 
 Tried https://spring.site ? - Android only. 
 NIP-07 sign-in was removed due to some extensions hasn't implemented NIP-44 encryption yet.

Blowater now still decrypts NIP-4 events, but will encrypt all DMs with NIP-44.

Therefore, using a NIP-07 extension effectively breaks DM, at least for now.

This is a trade off that's painful to make.

Not much love is put into encrypted events in the community as a whole so that I decided to break some patterns to just unblock the product development.

A more secure design is welcome and I will work on it. 
 NIP-07 is added back. If you are on mobile web, sorry that I am not focusing on mobile at the moment. In fact, I have to admit that my lack of mobile knowledge. 
 You can use NIP-07 with mobile, just have to install a browser extension. For example on iOS you can use the Nostore app. It can be compiled from source even.