Thoughts on revokable single-use passwords tied to your nsec?

Create it, use it, you’re logged in until you log out, revoke it, or the cookie expires. Create a new one to log in next time. All tied to your nsec, without revealing it.

There’s lots of shit wrong with Bluesky, but this feature is something they did very right.