Replying to Avatar Tim Bouma

Yeah, I was thinking the same - that this could be a password manager as well. I have built in the ability to store private records. I use NIP-44 to encrypt but could easily add in the AES password encryption as you suggest.

The big idea is that this ‘thing’ (safebox, password manager), via relays, can live independently anywhere. I’ve already started to build a replication functionality to move it to other relays. IMO that’s a big advantage over any cloud service, or even a self-hosted machine because it could fail, or your house burns down.

Anyway, still early days of heavy experimentation. Thanks for the comments!
Avatar
Max 1y ago 💬 1

Exactly, sufficiently distributed encrypted backups, very powerful

Reply to this note

Please Login to reply.

Discussion

Avatar
Tim Bouma 1y ago

Is the idea to AES-encrypt the .content with a password first, then do the NIP44 encryption? That way if the nsec is compromised, at least the records are still encrypted?

Avatar
Max 1y ago 💬 1

Correct, somewhat of a 2FA / post compromise secrecy.

Avatar
Tim Bouma 1y ago

Awesome. Thanks for the suggestions. I think it will be pretty straightforward to implement. Next cool feature project!