nostraveller on Nostr: To those worried about the use of nsec on the newest #bombshell dropped on #nostr ...
To those worried about the use of nsec on the newest #bombshell dropped on #nostr today, the #NostrBrowser, dev Brugeman @artur says,
"the key is stored in local disk encrypted, nip07 js interface is injected into the web apps to access the keys."
TBH, this is what every unsold #nostrich would be bitchin about, so there you go, what are y'all gawkin #nostriches waitin for?
I'm on the lookout for the app on Play Store though, ditchin Apple - totally not an option for #zaphappy nostriches like moi #grownostr
"the key is stored in local disk encrypted, nip07 js interface is injected into the web apps to access the keys."
TBH, this is what every unsold #nostrich would be bitchin about, so there you go, what are y'all gawkin #nostriches waitin for?
I'm on the lookout for the app on Play Store though, ditchin Apple - totally not an option for #zaphappy nostriches like moi #grownostr
quoting nevent1q…ujulPlease welcome Spring - the nostr browser.
This is the first public Android release, we're submitting to the Play Store, but an APK is ready for you to try: https://github.com/nostrband/nostr-universe/releases/download/v0.1.0/spring-nostr-browser-v0.1.0.apk
The app is open source: https://github.com/nostrband/nostr-universe/
We believe this category of a Nostr-specific browser is a very powerful tool for all the nostriches and bitcoiners. It takes the experience of using Nostr micro-apps to the next level, and should help accelerate the adoption of non-social Nostr use cases.
Some screenshots are here:
nevent1q…wmr4
If you hesitate to paste your nsec into the app, we totally get it - just use your (or someone else's) npub to log in and look around. However, if you do add your real keys - those are handled by a separate library, stored in an encrypted form and protected by the Android keystore, inaccessible to any JS code, immune to XSS or app-level bugs.
What you can do today:
- add nsec keys or npubs, switch between keys
- browse various interesting events on the homepage - trending stuff, suggested profiles, big zaps, highlights, long posts, live streams, nostr web apps
- open any event in any web app that supports this event kind and has been published on nostr using NIP-89
- open/close/hide the browser tabs, grouped by app/domain
- log in inside the opened apps as if you have the 'browser extension' (nip-07 interface injected into tabs)
- pin apps/tabs to your app "drawer" for fast access
- access your contact list at the search page, profiles sorted by recently-accessed first
- search through profiles, notes and long posts
- tab menu - if there is an event-id/npub in the url of the opened tab, you can zap the event, or open with another app from the menu (more coming soon)
- context menu - if you long-tap on a link with event-id/npub in the url, you can zap/open-with from the context menu
- nostr: links clicked inside a tab are handled by showing a list of apps that support this event (NIP-89)
- long-tap on a text selection with event-id/npub to open the context menu to zap/open-with
- paste a url to the search bar to open it in a new tab
- paste an event-id/npub into the search bar to open it in a new tab
IMPORTANT: nostr apps running inside the browser tabs can sign events and decrypt private messages without a confirmation screen and your explicit permission - do not use apps you don't trust until we implement proper app permission management.
What is coming:
- key access permission management
- reordering of pins in the app drawer
- more event kinds on the homepage
- search for more event kinds
- tab switcher screen
- NWC to inject WebLN into tabs
- custom feeds on the home screen
- custom tab/context menu items
- DVMs for translation, transcription etc
- and much more!
What do you think?