keepassxreboot / keepassxc-browser

KeePassXC Browser Extension
GNU General Public License v3.0
1.78k stars 188 forks source link

[Feature request] Implement Nostr signer in the Keepassxc browser plugin #2388

Open racuna opened 5 days ago

racuna commented 5 days ago

Hi,

Nostr is a protocol (Notes and other stuff transmitted by relays) that can be used for building social networks, blogs, reddit-like sites, and so on.

This protocol works using keys (public and private), and there is a NIP (Nostr Implementation Possibilities) that is used to provide a way to sign in to a Nostr platform without giving them the private key.

It would be interesting to see this implemented in Keepassxc instead of using another browser plugin to do it.

NIP-07 description: https://github.com/nostr-protocol/nips/blob/master/07.md

An implementation for Chrome: https://github.com/fiatjaf/nos2x

varjolintu commented 5 days ago

What prevents you for using a custom KPH attribute (KPH: <your key>) or Auto-Type for this?

racuna commented 5 days ago

That would give your private key to the different Nostr web clients. A nip-07 browser extension allows you to sign Nostr events on web-apps without having to give them your keys

https://github.com/aljazceru/awesome-nostr#nip-07-browser-extensions

varjolintu commented 5 days ago

I have no previous knowledge about the whole Nostr, but looking at the video here https://github.com/fiatjaf/nos2x I can see that you can enter the public or private key directly to the input field. The extension can already support scenarios like that. Isn't that a viable solution?

racuna commented 5 days ago

Yes, you can. But isn't recommended to put the private key in the input field of services (web-apps) you don't know if the dev has good intentions or not. That's why there is the NIP-07 proposal of implementation.

droidmonkey commented 5 days ago

This feels like an alternate universe passkey

racuna commented 5 days ago

This feels like an alternate universe passkey

Yeah... looks like it is. LOL.