I apologize for my ignorance, but what is wrong with that?

Reply to this note

Please Login to reply.

Discussion

>It's not possible to sign an arbitrary message with any sort of signature scheme by Trezor.

>

>It would be really stupid to allow this: if the message is arbitrary, you can stuff in, say, a valid Bitcoin transaction. Then it's a matter of crafting a clever malware, telling the user: "Security check: please confirm the following characters on your Trezor screen to validate your wallet", and stealing their money.

>

>The SignMessage APIs look like they accept an arbitrary message, but they don't sign it: the data that is actually signed is "Bitcoin Signed Message:\n(11 bytes)hello world" or something along these lines.

>

>Even if that is good enough for you, this feature currently does not support Schnorr signatures :( because there hasn't yet emerged a standard for taproot message signing.

Source: https://www.reddit.com/r/TREZOR/comments/vrftwn/comment/iexubo7/

do you think there is a difference between a hardware wallet and a web wallet associated to a nostr key?

for me it’s kinda confusing to apply something from hardware wallet to a web wallet that works with a nostr key and also prompts users for the actual private key

Thank you for the thoughtful response.