This kind of exists right now https://github.com/lnbits/nostr-signing-device although its based on an esp32 so not very secure
I have it working in noStrudel on chome using web serial. But I agree we need something better.
If there is a way for web apps to connect to it I would love to add support for it in noStrudel
That is what I mentioned in my post as not a shitty ESP32
Welcome to Nostr
Fast paced low quality half working projects are incentivized more than quality products that take months to build nostr:note1jmav6c840xj2fkzlsjw9c984wvmms422a4mplremq8ga3audjqls9kuagf
Memory bandwidth contention manifests itself as a drop in performance across all cores after some threshold :)
The benefit of a proper hardware solution is that:
- unlike nsecBunker, nsec.app and browser extensions, the impact of malware is limited
- unlike nsec.app your keys cannot be stolen by the app developer with a silent update
- unlike other “hardware” nostr signers, it doesn’t store keys in an easily dumpable ESP32 nostr:note140nfz32f6w0urdj0zv5agxznd226g6whn43n7auz7q2qkggrfeusxwuhlv
we do not need that either
it also supports negotiation
you set a list of protocols to request, server sends a protocol picked or none as a response
We can have a version field also.
Version 1: just normal Nostr events, signed as usual
Version 2: fields can now contain non-UTF8 content, new signing scheme
I’m on iOS 17 though. It works fine with HEIC also from Damus. But it most likely is a color space issue.
Uploading from the account page specifically seems to remove color profile data for some reason. 
p3 test 
I’ll DM you an explanation for my idea that will end up never finished soon. 😂
2. No.
All chips have some sort of hardware boot ROM, from your CPU to a Raspberry Pi to the STM32s used in a lot of HWWs including CC.
RPi boot ROM cannot be modified and such an attack would need to target your Pi specifically, which is impossible, and then somehow figure out a way to detect SS code and add a backdoor.
Just to add, the code on a CC is not truly verifiable without destroying the unit
I was thinking you would add it to the original event
the problem is with a tag you can’t add the faster signature later
why?
we can just add a new field like “binarySig”, relays can validate both of them (and backfill binary signatures if later added by the author), and clients can pick one