Oddbean new post about | logout
▲ ▼
henrixd | 5 months ago (raw) | root | parent | reply | flag +1 
 Webview is more vulnerable for side-scripting attacks and such than other techniques for sure and I'm not against optimizing for security. I'm not really against having a native client either, quite the opposite. I just don't think there are that many native linux clients out there and this approach isn't too bad. It does give me well performing local client.
▲ ▼
purple.co | 5 months ago (raw) | root | parent | reply | flag 
 I did something like this, but  only as a test. Is better than PWA. Only one issue, can't use webextensions (nip07), but if it works ... . + Appimage
▲ ▼
henrixd | 5 months ago (raw) | root | parent | reply | flag 
 It shouldn't be that hard to have window.nostr added. I first tought of using existing extension but many of them just save private key in plain text. I'm actually looking into that right now and trying to make friends with Rust, D-Bus and Secret Service but we'll have to see how well that goes, no promises. I should definately be able to put something together. Allready have window.nostr object added from my node module and JS talking to Rust backend through Tauri calls.

Also already managed to make some test saves to KWallet from Rust so basicly I should have most of the pieces already. Still have to put them togheter in a user friendly way. Maybe add some backup alternative saving place for those who don't have KWallet, Gnome-Keyring or KeePass which all should work with Secret Service. Anyway, I'm sure there still are many problems to solve along the way so we'll see.