so all users should be beholden to one centralized signing app?

also, one invisible code update can exfiltrate your nsec, and then could be removed. and you wouldn’t know

Reply to this note

Please Login to reply.

Discussion

where I'm going, there won't be an nsec to exfiltrate :-)

but I get your point. I think you can disable updates for installed PWAs (via the service worker)

the service worker will always be updated from the backend

I have done offline installs before, I think you can just keep it local with no remote host.

Both PWAs and extensions can fetch packages dynamically anyway

Looking forwards to seeing where all this goes… 👀

#nostr #memes