In addition to placing some trust in Keychat, with webview I assume we are also placing trust in other parties. Could a malicious webview party compromise others? Some nsec, privacy, ecash concerns with webview. Curious about a Linux version without webview.

Reply to this note

Please Login to reply.

Discussion

A simple way to understand WebView is that it’s the web browser engine built into the mobile operating system.

Both nsec and ecash are stored locally in Keychat.

When logging into a website with your Nostr ID, Keychat only provides the signature to the site — it never gives out the nsec.

This is great info & goes a long way in increasing my comfort with your app design! Thank you