ExploreTrendingAnalytics
Nostr Archives
ExploreTrendingAnalytics
Djuri24d ago
Still keeping your Nostr keys in a browser extension? Put them in an nsec bunker and use Bunker46 Extension — same NIP-07 experience, keys stay in your NIP-46 bunker, not in your browser. (Chrome Web Store submission pending) https://github.com/dsbaars/bunker46-extension
💬 12 replies

Replies (12)

Djuri24d ago
@4ffb87a9…2281157f I think you will like this
0000 sats
Leo Wandersleb24d ago
That's cool! Are you the author? I wanted that in the nip7 extension I had contributed to but never got around to implementing it.
0000 sats
Djuri24d ago
Yes I am, have been thinking about it quite a while but also couldn’t find a good nsec bunker so built that myself first and then as I noticed nip-46 acceptance is bad I finally built this as well. 📝 8639ccf8…
0000 sats
Leo Wandersleb24d ago
Cool! Wild times! Vibe coding feels a bit like a Cambrian Explosion event but who can ingest all that's happening and sort the good from the meh projects?
0000 sats
codonaft18d ago
Omg, thank you very much! 💓 I was missing it from the very beginning of joining nostr. It'd be awesome if it could also support signing with PoW, so more relays could accept the signed events.
0000 sats
Djuri18d ago
Thanks for the suggestion, I looked into this and I feel it's the Nostr clients ' responsibility to do the PoW if the relays require it. The Nostr client can decide on the mining implementation based on the relay info document and pass the mined event to the nsec bunker to sign.
0000 sats
beejay18d ago
Please consider Firefox Extension as well.
0000 sats
Djuri18d ago
https://addons.mozilla.org/en-US/firefox/addon/bunker46/
0000 sats
beejay18d ago
Thanks!
0000 sats
codonaft18d ago
Yeah, that's what I initially thought too. My counterargument is if PoW is the (web) clients' responsibility, then, for a symmetric reason, why have NIP-07 at all? Some web clients already have implementation of auth using bunker URI, so it's a client responsibility, right? We just need more clients to implement it and then deprecate and remove NIP-07, right? Of course not. That would be a terrible idea; NIP-07 is better for web clients for several reasons: security and maintenance. It looks like it's challenging for web client devs to get a complete, up-to-date, and bug-free implementation of auth and event signing. There are just too many things to test every time. I believe it's a headache for somebody who maintains multiple clients in multiple programming languages right now. So it's great to have as simple API for web client developers as possible. To some degree this applies to NIP-13 too. Yes, it's a simpler feature; however, still very few web clients properly implemented it (if at all). Just as with the auth using bunker. I believe both features (auth using bunker and PoW mining) are not worth having in web clients at all; your NIP-07 extension is the perfect place for that. Not just that it's challenging to support the features in every single client, it's also a UX pain for end users (finding the PoW setting in every single client every time, correcting it to what's preferable and possible for the device). Same with auth UI: it's currently overloaded with buttons in Yakihonne, for instance; this is scary for normies and boring for testers. It's better to have a single thing that works really-really well, in a predictable way, and in all web clients at the same time. I believe both users and web client devs will be happy. > based on the relay info document That's what I thought too. But I found NIP-11 unusable/impractical: it requires an additional connection which degrades client performance (ideally it doesn't but browsers do that anyway) or even breaks things (iOS/Safari *might* then close a WebSocket connection because it decided there are too many connections to a single server already), and it's usually misconfigured (CORS issues, wrong or incomplete JSON data). I find that working with NIP-11 is also another testing/maintaining headache, and it just doesn't work in practice.
0000 sats
codonaft18d ago
NIP-11 is also not very practical for PoW difficulty auto-selection because what if you're connected to a relay with too high min difficulty, so your device can't handle it? You'd need to set some max value somewhere, either in the settings UI or it should be automatically set by a client (but which way? by running a benchmark?). Having a PoW difficulty input field somewhere is almost inevitable. It'd be great to set it only once.
0000 sats
Djuri18d ago
You raise some good points, the overloading with settings is something that could happen in the extension as well though. But I think I'll do some experiments next week, might be interesting to implement it with web workers in the extension.
0000 sats