greenart7c3 on Nostr: ...

quoting nevent1q…r8hv

GM Nostr! 🌞

🎁 Announcing Keycast 🔑
A remote signing platform for teams.

https://share.cleanshot.com/y4XbqKpT

Remote signing (NIP-46) has always had a lot of promise. Apps like Amber, nsec.app, and others have made it possible to manage your nostr keys in a way that is safer than browser extensions or pasting your nsec around the internet.

BUT, none of them catered to teams. Groups like thenostrworld (npub1nst…rg5l) and NostReport (npub19md…6vzk) and many many companies out there are just sharing the main account nsec between different people and using it in different apps. A recipe for disaster.

Keycast aims to finally fix this. It allows you to:

- Manage teams of nostr users
- Manage multiple keys that you want to give others access to
- Create authorizations for those keys that grant specific permissions that can be changed, revoked, etc.
- Create your own custom permissions
- Run the signing infrastructure without any extra work

And do it all in a self-sovereign way. Keycast is meant to be run on your server, by you. I think it's tremendously important that this sort of tool doesn't exist as a hosted service (which would basically be a huge key honeypot over time).

The app is both a management web app AND a backend process that manages sub-processes that listen for remote signing requests, check permissions, and sign events.

There is a basic docker setup to start, but my goal is to have this easily deployable to StartOS, Umbrel, Podman, and others.

Code here: https://github.com/erskingardner/keycast