Replying to Avatar Sirius

I wonder if the native app could add window.nostr to the webview and keep the private key fully protected from XSS and any security breach of the PWA origin.
Avatar
Sirius 2y ago

Meaning custom native code for key management in the native app.

Reply to this note

Please Login to reply.

Discussion

Avatar
Mike Dilger ☑️ 2y ago

Phones have secure enclaves. If they did taproot schnorr secpk256 sigs (I don't think they do) you could use the secure enclave and not even see the private key in your own software.