tekne on Nostr: I said “wow” out loud. Been waiting for this. Previously, publications and ...

I said “wow” out loud. Been waiting for this.

Previously, publications and companies had to mainly use Twitter and secondarily bridge to Nostr. That can now be reversed as Nostr genuinely has better tooling and security than something like Twitter.

quoting note1327…l74j

GM Nostr! 🌞

🎁 Announcing Keycast 🔑
A remote signing platform for teams.

https://share.cleanshot.com/y4XbqKpT

Remote signing (NIP-46) has always had a lot of promise. Apps like Amber, nsec.app, and others have made it possible to manage your nostr keys in a way that is safer than browser extensions or pasting your nsec around the internet.

BUT, none of them catered to teams. Groups like thenostrworld (npub1nst…rg5l) and NostReport (npub19md…6vzk) and many many companies out there are just sharing the main account nsec between different people and using it in different apps. A recipe for disaster.

Keycast aims to finally fix this. It allows you to:

- Manage teams of nostr users
- Manage multiple keys that you want to give others access to
- Create authorizations for those keys that grant specific permissions that can be changed, revoked, etc.
- Create your own custom permissions
- Run the signing infrastructure without any extra work

And do it all in a self-sovereign way. Keycast is meant to be run on your server, by you. I think it's tremendously important that this sort of tool doesn't exist as a hosted service (which would basically be a huge key honeypot over time).

The app is both a management web app AND a backend process that manages sub-processes that listen for remote signing requests, check permissions, and sign events.

There is a basic docker setup to start, but my goal is to have this easily deployable to StartOS, Umbrel, Podman, and others.

Code here: https://github.com/erskingardner/keycast