No. Money + identity = surveillance.
Don’t use your money to log in. Use nostr.
No. Money + identity = surveillance.
Don’t use your money to log in. Use nostr.
LNURL-Auth doesnt provide a common identity as its unique per domain. The tactics used to collate between sites from usage patterns and analytics still applies with a nostr plugin to login
Is LN just the comms mechanism? Why include LN at all? Why not just some other server daemon?
LNURL Auth spec is the protocol for how to do it but it involves signing and hashing from derived key based on the site domain and lightning private key. resulting pubkey and signature provided to site to be able to verify and consistently assume/prove same id when user coming back to that site
i think something like amber for android could actually implement lnurl-auth on client if it hasnt already which would be a decent way to ensure separation from any funds to some extent