No. Money + identity = surveillance.

Don’t use your money to log in. Use nostr.

Reply to this note

Please Login to reply.

Discussion

LNURL-Auth doesnt provide a common identity as its unique per domain. The tactics used to collate between sites from usage patterns and analytics still applies with a nostr plugin to login

Is LN just the comms mechanism? Why include LN at all? Why not just some other server daemon?

LNURL Auth spec is the protocol for how to do it but it involves signing and hashing from derived key based on the site domain and lightning private key. resulting pubkey and signature provided to site to be able to verify and consistently assume/prove same id when user coming back to that site

i think something like amber for android could actually implement lnurl-auth on client if it hasnt already which would be a decent way to ensure separation from any funds to some extent

🤔

Sounds neat but using the same keys for money and “other” is my hesitation/skepticism. Especially now that ppl have nostr keys which are a bit more less sensitive than money keys.

Sounds like you might be able to have a LN node with no funds and still use it?

yes. no funds required