what is a ncryptsec?
RFC on a new custodial signer I'm building. Highlights:
- Designed to be used with a single app rather than following the user around.
- Has email-based registration/reset workflows.
- Provides a signer/relay combo, reducing nip46 latency.
- Encourages users to "eject", which sends them an email with their ncryptsec, and deletes their account from the database.
The goal is to limit incentives for attackers to steal keys. The keys are only used for a single application, only keys for that application are stored, and the application eagerly deletes keys from the database. Keys are encrypted at rest.
Here's a demo video:
https://coracle-media.us-southeast-1.linodeobjects.com/burrow-demo-20241202.mov
And the source code:
Discussion
A way to encrypt one's nsec (private key) with a personalized password to make storage/use more secure.
I understand the storage part. But what’s you recommended standard? Should people save their ncryptsec to a password manager? How can I decrypt it without the help of any app?
I’m a bit confused as to how to use this properly. Any help is greatly appreciated.