Not sure if possible or how it would work, but for logging into web apps and clients could a user use their verified NIP-05 and connect it to 2FA? Is that possible to eliminate browser extensions and the need for pasting your nsec? #asknostr #grownostr
Discussion
2FA is terrible and should be avoided since nearly all 2FA methodologies are about Metadata harvesting and not about securing anything.
Where would your private key be stored in this idea? Would it be held by your NIP-05 provider and the client would call out to them whenever it needs an event signed by you?