Replying to Avatar BTC Minstrel

Need some help from the #nostriches

It's been brought to my attention that my nip-05 identity isn't actually working. So some may think I am not, in fact, me.

I have a nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm account and address, and it is properly loaded into all the nip-05 fields of the nostr clients I use. Mainly nostr:npub12vkcxr0luzwp8e673v29eqjhrr7p9vqq8asav85swaepclllj09sylpugg and nostr:npub18m76awca3y37hkvuneavuw6pjj4525fw90necxmadrvjg0sdy6qsngq955

I believe I've isolated the cause: I have not entered my nostr Master Key into the account settings of my Alby account. Which (I think) means that alby can't "verify" my nip-05 identity.

However, many wise nostriches have warned that one should avoid at all costs entering your nostr master key into any client software. This is what browser extensions should be doing for you instead, such as nos2x (which I use).

But all the fields for entering your public key are disabled, and seem to be more of a display field that generates your public key after you have entered your private key, or Master Key.

nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm seems fairly trustworthy, but I've a physical aversion to entering my private key, let alone my recovery seed, into their platform as it feels akin to entering my bitcoin private keys into website.

So what's the play here? Am I thinking about this wrong? Am I misunderstanding the nip-05 process?

If I look at this below, it doesn't come back as working. That means it's not configured on Alby's side. To mean, that means you haven't setup NIP-05 in their extension yet. Once you import your NSEC "master key", then it will be setup as they'll know your public key and be able to create the proper entry for you in the file below.

https://getalby.com/.well-known/nostr.json?name=btcminstrel

Reply to this note

Please Login to reply.

Discussion

also to add to this, nos2x and alby do the same thing, they act as key signing extensions. alby just is also a lightning wallet and has some other features alongside being able to sign transactions. i used nos2x for a while before switching to alby on desktop. i'd say it's safe to use.

Okay, I think I fixed it. Apparently I was in the wrong nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm site for adjusting my settings???

Had to log in to the "web account" to find the right location. Only entered my public key there and it SEEMS to have worked.

While I've been thoroughly impressed and satisfied with almost every aspect of nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm since I started using it, this is one area I found very disorienting as a user --> a differentiated sense of "location"

There are, from what I can gather, at least THREE different "locations" where I can fiddle with my Alby account:

1. The extension. The actual little popup window you see when you click the browser extension icon.

2. The browser page that loads from the extension (???). An actual webpage that loads when you click "Settings" within the extension.

3. The web account (??). The actual getalby.com website, to which you must sign in, and which is, apparently, separate from the browser extension.

I was trying to accomplish the nip-05 process in location 2 when I should have been in location 3.

But there are plenty of menus, pages, and fields in location 2 that seem to indicate I can sort out the nip-05 situation in that location, but only if I enter my private/master key?

I finally, through sheer dumb luck, stumbled upon location 3, which had ANOTHER settings menu, wherein laid my nip-05 salvation.

Just a little UX feedback for the fine folks at nostr:npub1getal6ykt05fsz5nqu4uld09nfj3y3qxmv8crys4aeut53unfvlqr80nfm, who are doing God's work and have built a brilliant, important product for the future of digital value, and whom I fervently hope will continue in their efforts.

#grownostr #valueforvalue

ah. you can have multiple alby "accounts". for example, i have one to make payments from my node and then i want one for my alby wallet. since they're different accounts, i have to have my nostr private key saved into both of them for both of them to sign nostr events. it makes sense if we're treating them like separate accounts, but confusing otherwise. glad you got it figured out.

Hey BTCminstrel, thanks so much for such extensive description of your experience. We are very aware of this problem and are trying to improve on helping our users grasp the difference between the extension and Alby (custodial) Account, with user can use (but don't have to) with the extension. It is far from well designed so far.

I have a question for you that might help us - If you could you imagine this experience going smoothly, how would that look like?

Excellent question. I will think on it today and try post my thoughts tonight.