It’s too early to know what will be built in the future, but I would hope that client that tried to violate user trust, i.e., creating accounts where the nsec is not accessible, or selling user data, etc. would be quickly abandoned. Right now, we are in a place where the development happens out in the open. We know who operates our relays and builds our apps. They’re part of this community and we can call them out if they do something we don’t agree with. I don’t think anything like this has ever been attempted before.

Reply to this note

Please Login to reply.

Discussion

many reasons other then the client being a bad actor for using a signing extension… this explains it better than I ever could.

https://orangepill.dev/nostr-guides/guide-nostr-key-generation-and-management/#tools-and-clients-to-manage-nostr-keys-and-authorize-signing-of-events

It’s frustrating that we don’t have iOS native signing extensions yet.

you mean for apps? That would be nice. But I also think generally the community here would like to move to platform agnostic options, jacks always talking about trying to fund a web os.