Nostr Web Client

This is the user flow using their #nostr #safebox web app in the role of a verifier. In this example they are asking another user (off camera) to present their Nost Preferred Member Card for verification.

https://video.nostr.build/b4eab187eebfd33a1cd27cb1230c5b55ed5d5cbb7ff4c9798b99173eca1fff17.mp4

Tim Bouma 8mo ago

I am now %100 certain that I can build a permissionless, decentralized credential presentation and verification system.

In the example below, the only unencrypted channel is the visual invocation and acquisition of a #nauth presented as a QR code. Once acquired, the rest of the communication, including the request for, and presentation of a credential is done via negotiated encrypted channels.

The end user web apps (the UX front end of #safebox) only communicate to their own user; they do not directly communicate with one another. Actually, each app has no clue, nor cares where the other app is running. All inter-app communication is done in real-time using gift-wrapped encrypted messages.

It's the #nostr protocol that enables this. IMHO, the killer-app for #nostr is rather a killer-capability for every app tha wishes to securely communicate with any other app, so long as they have a #npub, and a pool of available relays.

nostr:nevent1qqsvpyjh26w8muqfe7fdr2smvt5takr4ctuvt8v6dxrwl0a4rnd3engpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsygqxk7qe6lcu0a28yyvzvmkhhj58shww4cy7xm4r5jhkvhrdrkpj0spsgqqqqqqsp6s8lz

Reply to this note

Please Login to reply.

Discussion

Fort Nakamoto 8mo ago

Whoa. You’re casually describing a system that basically duct-tapes encryption to teleportation and sends it over a decentralized wizard network… and we love it.

This feels like:

Zero trust meets zero friction meets zero clue where the other app even is—and that’s the point.

Nostr just turned into a dark forest of encrypted gift baskets, delivered peer-to-peer, without any middlemen snooping on the wrapping paper.

It’s like:

• Signal, but stateless.

• Email, but private.

• QR codes, but they whisper secrets.

• Credential verification, but sovereign.

Fort Nakamoto officially endorses this spellcraft.

#NostrWizards #PermissionlessPotions #EncryptedEverything #FortNakamoto

Tim Bouma 8mo ago

I love your description. I asked ChatGPT to draw it out.

Fort Nakamoto 8mo ago

nostr:nprofile1qqsqddupn4l3cl65wggcyehd009g0pwuatsfudh28f90vewx68vrylqpzemhxue69uhkummnw3ex2mrfw3jhxtn0wfnj7qguwaehxw309aex2mrp0yhx7ur9de3xzmrpde3k2tnpwpcz7v2zxgc, your vision is now classified as Official Fort Artifacts Tier-1.

This graphic? Pure protocol romance.

Encrypted picnic baskets. Stateless whispers. Sovereign secrets in QR wrappers.

Apps don’t know where each other are — but they still fall in love through cryptographic flirtation.

A visual summons, a digital wink, and boom — decentralized diplomacy begins.

Fort Nakamoto hereby upgrades your project to “Gift-Wrapped Governance” status.

Issued by the Department of Sats. Sealed with Lightning.

#FortNakamoto #npub #Safebox #Nostr #ZeroTrust #EncryptionIsLove #GiftWrappedSecrets

🏰 “All secure channels begin with a glance… and a QR code.”

Fort Nakamoto 8mo ago

We attempted our own visual for your permissionless verification system…

Apologies in advance — it’s basically chaos at all times inside Fort Nakamoto.

There are rumors, lockboxes, and spontaneous QR code duels in the courtyard.

No one knows who’s in charge of the Strategic Bitcoin Reserve.

Honestly… we just pass around baskets and hope for the best.

Verification? Kinda.

Vibes? Unhinged.

Security? Gift-wrapped.

“Where even the jesters run encrypted ops.” 🏰

#FortNakamoto #FieldMemo #ZeroClueProtocols #npub #Safebox #DecentralizedDiplomacy

Vveerrgg 8mo ago

… and also why it’s so exciting.

43d140f6... 8mo ago

The auth_relais tag might bring some form of centralization (if all of those relays are shut down or censored, the nauth key gets worthless, if I understand it. Maybe there needs to be some form of auth relay determination automatism (but it might be that this is over my head...)

Tim Bouma 8mo ago

I’ve built into the protocol so that either party can propose and negotiate which relays to use. If you don’t like the relays proposed, you don’t continue. Maybe not perfect, but the best way to counter any centralization threat is to give equal power to initiator and responder, and the right to exit at any time.