RFC on a new custodial signer I'm building. Highlights:
- Designed to be used with a single app rather than following the user around.
- Has email-based registration/reset workflows.
- Provides a signer/relay combo, reducing nip46 latency.
- Encourages users to "eject", which sends them an email with their ncryptsec, and deletes their account from the database.
The goal is to limit incentives for attackers to steal keys. The keys are only used for a single application, only keys for that application are stored, and the application eagerly deletes keys from the database. Keys are encrypted at rest.
Here's a demo video:
And the source code:
https://github.com/coracle-social/burrow
hodlbod /
npub1jl…jynqn
2024-12-04 20:07:01 GMT
Author Public Key
npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqnPublished at
2024-12-04 20:07:01 GMTEvent JSON
{
"id": "7acfaaa235b6e7ecfbeaf3ce603ed45951fe7b765db24311898d1066571b2273",
"pubkey": "97c70a44366a6535c145b333f973ea86dfdc2d7a99da618c40c64705ad98e322",
"created_at": 1733342821,
"kind": 1,
"tags": [
[
"client",
"Coracle",
"31990:97c70a44366a6535c145b333f973ea86dfdc2d7a99da618c40c64705ad98e322:1685968093690"
]
],
"content": "RFC on a new custodial signer I'm building. Highlights:\n\n- Designed to be used with a single app rather than following the user around.\n- Has email-based registration/reset workflows.\n- Provides a signer/relay combo, reducing nip46 latency.\n- Encourages users to \"eject\", which sends them an email with their ncryptsec, and deletes their account from the database.\n\nThe goal is to limit incentives for attackers to steal keys. The keys are only used for a single application, only keys for that application are stored, and the application eagerly deletes keys from the database. Keys are encrypted at rest.\n\nHere's a demo video:\n\nhttps://coracle-media.us-southeast-1.linodeobjects.com/burrow-demo-20241202.mov\n\nAnd the source code:\n\nhttps://github.com/coracle-social/burrow",
"sig": "06fccc85771ae92bd41e56a8b77c99dc61772b1d46c8ebf7f3f0fc29a89a8c7d007da5d799ffcba8c4fb372383396ff436f85219b4fa32639e838e5dc3dc4638"
}