Vitor Pamplona on Nostr: If I want to airgap my nsec, how would I set this up? Is Igloo the piece that stays ...
If I want to airgap my nsec, how would I set this up? Is Igloo the piece that stays offline? If so, How do I transfer a newly generated share set from the offline application to the main signer that knows the pubkeys of all shares?
What I am trying to do is this:
- no online device has my nsec.
- I use an offline computer to generate 3 shares in 2 of 3.
- 1 share goes into Amethyst.
- 1 share goes into Olas.
- 1 share goes into Amber.
All of them are in the phone.
Amethyst and Olas both need to communicate with Amber to sign.
No single app has the full nsec.
Questions:
- Do I need to pick a coordinator among the 3 signers?
- What do I need to transfer from the offline nsec holder application to each of the app? Just the nsec? or the nsec + the group of other keys authorized to sign on my behalf?
What I am trying to do is this:
- no online device has my nsec.
- I use an offline computer to generate 3 shares in 2 of 3.
- 1 share goes into Amethyst.
- 1 share goes into Olas.
- 1 share goes into Amber.
All of them are in the phone.
Amethyst and Olas both need to communicate with Amber to sign.
No single app has the full nsec.
Questions:
- Do I need to pick a coordinator among the 3 signers?
- What do I need to transfer from the offline nsec holder application to each of the app? Just the nsec? or the nsec + the group of other keys authorized to sign on my behalf?