Good pushback, all three are real.
Round trip. Agreed, a bunker on a phone that's asleep is a bad experience. That's exactly the friction I've been building a dedicated signer for. It's its own hardware, always on, serves the client straight off the device over the LAN so the tap and the signature happen in the same place, and it still answers as a bunker remotely for other clients. No phone in the loop, nothing to wake up, and the key never leaves a chip whose only job is holding it.
Issuer. Agreed, a signature on its own just says some key signed. Where I've landed is you don't invent the authority on Nostr, you borrow one that already exists. Whoever already has standing with the customer holds the signer, the record is bound to a physical tag on the thing, and the signature inherits that standing. Nostr is just the transport nobody can switch off.
One key. Also right, and it's why I keep saying the key needs a proper home. Written seed, passphrase, and for anything that matters a quorum rather than one key. Hardware doesn't solve recovery, it just makes the recovery story possible to take seriously. If it’s good enough for bitcoin , surely it should be for Nostr.
Josh
npub1mn…f2twd
2026-10-09 04:37:43 UTC
in reply to nevent1q…6dcy
Author Public Key
npub1mnfk8hzyfk2lw75zjrqw5f70mk078prztny4azdvdnhsjt7v08xsmf2twdPublished at
2026-10-09 04:37:43 UTCEvent JSON
{
"id": "b91134dd229eaae3539d66cd291efe77ad25257984e6918f6227b8eeda200676",
"pubkey": "dcd363dc444d95f77a8290c0ea27cfdd9fe384625cc95e89ac6cef092fcc79cd",
"created_at": 1791520663,
"kind": 1,
"tags": [
[
"e",
"9ebd0f862f196739e900ba69b0cd11124c10c5415ecdfe838aa2826a473ec3c3",
"wss://relay.favillakey.io",
"root"
],
[
"e",
"9f5eb7b74571ffa20081cbb90407e5008d049a98b87ed55e2188f07cdd44ab41",
"wss://relay.primal.net",
"reply"
],
[
"p",
"68240d4932950242924434c5b118035a92448a9570caf1fde7aeca77afbc80e4"
]
],
"content": "Good pushback, all three are real.\n\nRound trip. Agreed, a bunker on a phone that's asleep is a bad experience. That's exactly the friction I've been building a dedicated signer for. It's its own hardware, always on, serves the client straight off the device over the LAN so the tap and the signature happen in the same place, and it still answers as a bunker remotely for other clients. No phone in the loop, nothing to wake up, and the key never leaves a chip whose only job is holding it.\n\nIssuer. Agreed, a signature on its own just says some key signed. Where I've landed is you don't invent the authority on Nostr, you borrow one that already exists. Whoever already has standing with the customer holds the signer, the record is bound to a physical tag on the thing, and the signature inherits that standing. Nostr is just the transport nobody can switch off.\n\nOne key. Also right, and it's why I keep saying the key needs a proper home. Written seed, passphrase, and for anything that matters a quorum rather than one key. Hardware doesn't solve recovery, it just makes the recovery story possible to take seriously. If it’s good enough for bitcoin , surely it should be for Nostr.",
"sig": "31bd8deb14f21b95dbf594a3e763ee30acd6ab62485d0ecc1b9c482e54cdcc1853f92c00980fe6fbcae0c65af93a09a40208f53fb7252dd131740a8a7b90e395"
}