I'm trying to think of how can I get normies to use a nostr client , to 'register' and 'login' without having them download a nostr extension or app signer, or needing to trust a a bunker service.
Thoughts on:
- Just a login screen/page/popup.
- Login with extension, or with remote signer, or with bunker, or with email+username+password combo (this would be the main/top method).
- With that email+username+password combo, it would generate an npub/nsec pair with a standardized script.
- Users can use this combo to always login to the same npub/nsec pair.
- This is generated/stored/used locally
- It's unsafe, but more safe/convenient and intro-friendly for normies than 'click to generate address pair', as its a familiar feeling
- The user still maintains custody
This is basically similar to a bitcoin mind wallet.
This should be used as an optional intro for normies, but clients should definitely show prompts mentioning that this is not advised/optimal and they should create a new account using an extension or remote signer, etc.
https://image.nostr.build/3247c61b64c558719dab9ff2a6457f5f9f56e831886c448447448ad262147c3c.jpg
(a quick visual representation. There'd be just a "login" button in the navbar or app, and they'd see this. It's missing text that warns the user that this wouldn't be advisable). This seemingly less daunting for a normie user, I'd assume)
It's be an interesting 'temporary' option as a buffer for transitioning normies to the proper process of nostr.
It's the more secure and more convenient version of a brain wallet, but still bad and we'd constantly remind users to switch/move accordingly.
Thoughts?
#nostr #nostrdesign #asknostr
This is what @zach had initially implemented before finding nsecBunker.
I don’t think we’ve arrived yet at the right solution for frictionless, normie-friendly onboarding process.
I’m hopeful we’ll get ROAST-based signing very soon which will allow for the seamless flow of an nsecBunker without the trust required.
Looking forward to it! =3
t-y Freakoverse iwishUfreakluv that has been waiting
This is a tough one. #normies should try to bend their minds enough to know the key pair is the future. Whether #nostr or #bitcoin and the sooner they understand it the better off they will be
But if the constraint is no external key generation mechanism, then alternatives like limited access until a key is submitted or depending on the client keyless involvement similar to buying airplane tickets without accounts?