Avatar
Tim Bouma 1y ago

It’s all about protecting your key

https://www.cisa.gov/sites/default/files/2024-04/CSRB_Review_of_the_Summer_2023_MEO_Intrusion_Final_508c.pdf

Reply to this note

Please Login to reply.

Discussion

Avatar
starp 1y ago

Anyone done FIDO2 with Nostr yet?

Would be cool to see more PAM apps built. I hear chatter in corporate infosec that "Identity is the new perimeter"

Avatar
Tim Bouma 1y ago

I tried. Kinda worked.

Avatar
starp 1y ago

Reading thru NWC docs I don't see any MFA functionality

Avatar
Tim Bouma 1y ago

I gave up. I implemented a nostr nip04 challenge/response which IMHO gives sufficient security assurance without needing the hardware. Plus it makes every #nostr client and out of the box Authenticator app