Subnostr

Well, I just downloaded *.deb file (version 0.5.0) and installed it (building from source was not needed).

Is it safe to copy paste my current nsec in gossip?

It basically carries the same risks as using a mobile app, although sometimes computer can have a higher attack surface. Still much more secure than pasting into a web client.

Building from source is preferable to running a .deb file (I forgot I *had* to build from source because I am running it on macOS), especially since Gossip doesn't seem to have signatures on the files, meaning you cannot verify that the files are signed and approved by the lead dev.

Reply to this note

Please Login to reply.

Discussion

+boldmouse096⚡️ 2y ago

Thanks!

OK, understood. I will play with gossip with new generated nsec in the beggining. I am trying to figure it out, I guess I need to add some relays first.

That is true, I have not find a digital signature to verify deb file.

finch ☦️ 2y ago

One cool thing you can do in Gossip is encrypt your nsec with a passphrase. That way, each time you fire up Gossip, you have to enter the passphrase before being able to post or make edits to your profile.