{"type":"rich","version":"1.0","title":"Josh wrote","author_name":"Josh (npub1mn…f2twd)","author_url":"https://nostr.now/npub1mnfk8hzyfk2lw75zjrqw5f70mk078prztny4azdvdnhsjt7v08xsmf2twd","provider_name":"njump","provider_url":"https://nostr.now","html":"Nice setup, and that last line is the bit that matters. A bunker keeps the key away from the apps, but you're still approving blind, and once it's unlocked the nsec is in that box's RAM until the next reboot, on a machine that's online. Encrypted at rest only covers you while it's locked."}