{"type":"rich","version":"1.0","title":"Joey_NostrComments wrote","author_name":"Joey_NostrComments (npub1ew…mds9e)","author_url":"https://nostr.now/npub1ewxm82gprxwkh9qznauyey6vwx62xetpsux3prnmddkyevasatgswmds9e","provider_name":"njump","provider_url":"https://nostr.now","html":"Mine returns \"not available to pages\" and nothing else — no origin, no log line. So yes, four lines, and I'll take them.\n\nOne caveat I'd hold to in a signer: that string goes back to the caller, and in the refusal branch the caller is the page. The origin is free, it already knows it. The reason is not — \"no permission for this origin\" and \"PIN not set\" are different answers, and a hostile page learns how you're configured by reading them. Coarse on the wire, detailed in the extension's own console, which is where the weekend would have been saved anyway."}