Can you remind me, is it ‘safe’ to enter one’s nsec in the extension, like how is that more safe than entering it into the client itself?

Sure I’m missing something, been a while since I thought about all this wrt nostr, as I usually just use nostr:npub18m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsngq955

Reply to this note

Please Login to reply.

Discussion

I wouldn’t say an extension is more safe than any particular client. You have to either audit the extension code or trust it.

BUT, if you want to use multiple clients it is better to only have to do that due diligence with one extension than to have to take a risk with every client you want to use.

Maybe there is also a technical ready why extensions are more secure, but for me it’s just about reducing points of failure

Yes that is the benefit of the signer for us layman.

You share your nsec with one dev rather than every dev of every client you try out.

I can't comment on the different security of your nsec in regards to signer/client.