Nostr Web Client

In the end it’s a key that you use to unlock the SE.

All the SEs used right now by HWWs could be changed next day to accept letters and symbols and hundreds of characters.

What I am noticing is you trying to shift away from the root question of the post: What benefit does a passphrase entry on the HWW have compared to a longer PIN in terms of threat model?

semisol 2mo ago

If you want an example, look no further than Satochip: https://satochip.io

Their cards support any text as a PIN. And the chips in smart cards are almost the exact same as HWW SEs. So all you need is a display.

You can set a passphrase when setting up a seed, and it will be automatically used when you use your full PIN.

Reply to this note

Please Login to reply.

Discussion

JackTheMimic 2mo ago

Yeah, blind signers have no security holes....

semisol 2mo ago

How is that relevant to the conversation? Put the same chip in a signer with a display.

JackTheMimic 2mo ago

Are we talking DIY devices or manufactured? Please stay consistent.

semisol 2mo ago

We are talking about a manufactured device. A manufacturer can put the same chip in a HWW with a display and I think we both know that was what we were talking about.

JackTheMimic 2mo ago

COULD yes, they don't. I could also buy an ESP32 and fashion my own device. We are talking about fully manufactured market devices.

semisol 2mo ago

They don’t because due to financial interests, and this is what the entire point is!