Alex Gleason on Nostr: One of the problems to solve is... what if the server does need to know your secret ...
One of the problems to solve is... what if the server does need to know your secret key, because it needs to sign events on your behalf? Well, it turns out we can solve the problem differently with Remote Event Signing (aka Nostr Connect).
You store your secret key in an app, and then authorize third-party apps to sign events through it.
Published at
2023-06-11 17:29:11Event JSON
{
"id": "11119c14868747f3ffe84aed703fc7ecf7291c88f46d6f4a604c2697041eb1f8",
"pubkey": "79c2cae114ea28a981e7559b4fe7854a473521a8d22a66bbab9fa248eb820ff6",
"created_at": 1686504551,
"kind": 1,
"tags": [
[
"p",
"79c2cae114ea28a981e7559b4fe7854a473521a8d22a66bbab9fa248eb820ff6",
"wss://relay.mostr.pub"
],
[
"e",
"e8ec5483b4d2c567eda51770e0d52d3c6318f3e8c3dce8b662f4c089ddfa2e18",
"wss://relay.mostr.pub",
"reply"
],
[
"mostr",
"https://gleasonator.com/objects/2d86974d-b42d-4a56-a270-eb3e5d6330a8"
]
],
"content": "One of the problems to solve is... what if the server does need to know your secret key, because it needs to sign events on your behalf? Well, it turns out we can solve the problem differently with Remote Event Signing (aka Nostr Connect).\n\nYou store your secret key in an app, and then authorize third-party apps to sign events through it.",
"sig": "f8fd92bf7471e81a331af9056013bf5c3349be2b9a4d5d1f59ec787278e156ac08ba38a2ad863810b3119aa0b7d39305f446b2d4a3934d21fc8fd762acbe4ce9"
}
