Nostr Web Client

I'm currently working on a custodial multisig thing with email-based recovery and login for the normies. Would love any thoughts on the spec, especially with regard to possible security/privacy problems:

https://github.com/coracle-social/pomade

n 3w ago 💬 1

一般層向けにメールベースのリカバリーとログインを備えた仕組みらしいです。これはどうでしょうか？

nostr:nevent1qqspt44sw0svnrds8663xqq4frz4ftze4uf727vwvzjxeqsy95h36gqpz3mhxue69uhhyetvv9ujuerpd46hxtnfdupzp978pfzrv6n9xhq5tvenl9e74pklmskh4xw6vxxyp3j8qkke3cezqvzqqqqqqypgdtce

Reply to this note

Please Login to reply.

Discussion

AAA 3w ago

Relying on email to recover accounts does not appear to be as secure as using mnemonic phrases and private keys to recover accounts, as email account breaches are not uncommon.