Honestly though I wish I could just provide my npub for 2FA everywhere. It’s so clean and so obvious. And much harder to get sim swapped. And it’s nostr so it’s sexy.
What about a nostr micro-app that worked as a plug-in for any random website to use nostr DMs for 2FA? From a technical view is that a thing that could work? I feel like if it works on Damus.io then it should function anywhere, no?
This should be even more secure in the future with the login-with-a-client NIP. We currently do something similar when logging in to sign up for purple. The app opens up and Damus is used for verifying that it’s you.
We just couldn’t use this flow yet for logging in on the website since we hardcoded that flow for purple lightning subscriptions.
Soon we won’t need the OTP stuff and you can just let damus to verify the login directly.
That’s insanely cool. You all are literally building the future right here
