Replying to Avatar Andrew

If I understand correctly, the reason it’s safer to input your private key on native apps like Damus is because the key is stored locally.

If that’s the case, why don’t web clients like Astral/Snort/Iris/YoSup/etc store the private key in the browsers localstorage when accessing it from mobile? Is there a technical reason this doesn’t happen?
Avatar
Semi-Normal 3y ago

Hmm.. I have been using nos2x browser extension, works like a charm with the web clients I have been using.

Reply to this note

Please Login to reply.

Discussion

Avatar
Andrew 3y ago

I’m moreso wondering why browser localstorage can’t store the private key instead of extensions like nos2x?

Avatar
Semi-Normal 3y ago

Is browser local storage persistent? Or would like clearing your cache delete it? So far I'm quite happy with the extension.

21
217e3d8b... 3y ago

It can and does work on snort, the reason that its not recommended is because its not very secure since a lot of sites have been and are vulnerable to XSS

Avatar
Andrew 3y ago

Ahh that makes sense, thanks for the explanation!

Avatar
FreeTrade 3y ago

It can, but many prefer to trust one extension rather than multiple websites. Extension has simpler interface too, so less likely to leak due to xss

Avatar
Andrew 3y ago

Gotcha! Makes sense