Replying to Avatar jb55

one addition I want to make to this:

user two-factor password and app salts

this would allow you to add a two factor to your private data, associated with a specific app.

if your key leaks you wouldn't get mass decryption of private notes.

nostr:note1g8epn75k0lctmr0h6vj2uw6r7dt54n6c4tlaa348a23gt34h2k4stctxmq
Avatar
jb55 1mo ago

it wouldn't be clear at all to an attacker who has your nsec if you even have ai convos or specific types of private notes on certain apps, since you would need your two factor password to even know the author pubkey for the private note

Reply to this note

Please Login to reply.

Discussion

Avatar
il_lost_ 1mo ago

Then turn the key into something like nosskey (passkey for nostr)

https://github.com/ocknamo/nosskey-sdk

Avatar
jb55 1mo ago

will look into it...

Avatar
jb55 1mo ago

I'm not entirely sure how I would use this

Avatar
il_lost_ 1mo ago

To test the app on Android, I use Google Authenticator and Authenticator (but it's not working right now).

I haven't tried Bitwarden, but it should work.