Yeah an actual Cashu mint.

The results is mint the code of which you or anyone can attest and the database of which you or anyone can also attest, as long as you trust AWS and their hypervisor. Or Intel and their chip design, whatever path you go.

But again, if you pull the keys out the mint self-destructs, Mission Impossible style.

I really dunno why enclaves aren't more widespread in the nostr zeitgeist. nostr:npub1xdtducdnjerex88gkg2qk2atsdlqsyxqaag4h05jmcpyspqt30wscmntxy has been doing a lot of really interesting work on the enclave side for signers. Maybe because it means some reliance on AWS or Intel for the attestation? For me Nostr relies on DNS anyway so not a big deal, but for others I dunno.

Reply to this note

Please Login to reply.

Discussion

I freaking love this and I want to learn everything about it please. We've been thinking about this forever and it's amazing to hear that you've done the work and tried it out. I have so many questions. Is there any code you can share? Can we get on a call so I can ask you a ton of questions?

Yeah sure, I'll figure out this matrix and message you there.

I would love to see the code. Is it public?

I had to read up on secure enclaves.. this was helpful for the left of the bell curve https://www.oblivious.com/blog/so-what-exactly-are-aws-nitro-enclaves

Yeah Enclaves are great. The solve so many problems for Nostr.

But they're expensive!

Nothing so organised I'm afraid. Full heretical disclosure, we (me and small team here in Southeast Asia) are mostly researching Cashu for last-mile payments for regional stablecoins in Asia and this enclave stuff is part of some dabbling around while waiting for the native-taproot rails on lightning to settle in.

Also there's the need to use other chains for the smart contracts that orchestrate the mint enclaves, and I'm a bit wary of bringing that topic to nostr here. (You can do this in an enclave-only scenario without on-chain smart contracts to orchestrate, but then it becomes hard to scale.)

I'll put together a summary though if people are interested.

Very interested. Can you please share the process of setting up such a mint, which service you used, etc? Or does it just work?

Sure, also just joined this Cashu research group on telegram.

I don’t think it’s fair game to say nostr relies on DNS.

It’s not like matrix, activity pub and all that federated crap where identities are tied to server names.

We just happen to connect with relays to send and fetch notes, that more often than not do have a DNS.

And we have people building P2P experiments with nostr, which further proves the point.

What I mean is that every nostr relay and media server is on an ICANN domain, so without connecting to ICANN DNS nothing on Nostr works.

Unless you’re on Damus android pulling notes from nearby peers, or connecting to a tor relay or…

My point is nostr doesn’t halt without DNS, contrary to other protocols which tie DNS into user accounts.

Fair enough, I've not yet looked into whatever Damus Android is doing.