If you make a site with nostr login, just a friendly reminder that nip07 doesn't validate nsecs and a malicious extension can easily spoof the public key.