Yeah, I use a completely different approach for #nostr #safebox. I replicate what’s done by the card networks by generated an encrypted secret on the card. The token on the nfc card gets submitted along with the payment request, decrypted and sent along to a NWC server to execute the payment instruction.

Looks interesting. I build the security into the tag itself, including an encrypted PIN so don’t really need the card security.