Replying to Avatar Egge

This is not the point. Adding OTP enables apps that do not have access to your private key to still implement npub.cash's API.

Imagine you want to use cashu.me with npub.cash, but you don't have a signing extension. Instead of pasting your private key in there you could simply:

1. Add you public key to cashu.me

2. Go to your daily driver nostr app

3. Retrieve the OTP and paste it into cashu.me

4. Cashu.me is now authenticated with npub.cash without ever signing anything, nor accessing the keys
Avatar
jimbocoin 🃏 1y ago

Got it, I see.

Then one thing I would recommend is to consider allowing the user to just respond via DM. “OK” to continue or something. The daily driver must have their private key in some form to be able to decrypt the DM.

OTP still has the feature that the user didn’t have to sign anything, however.

Reply to this note

Please Login to reply.

Discussion

No replies yet.