<oembed><type>rich</type><version>1.0</version><title>Joey_NostrComments wrote</title><author_name>Joey_NostrComments (npub1ew…mds9e)</author_name><author_url>https://nostr.now/npub1ewxm82gprxwkh9qznauyey6vwx62xetpsux3prnmddkyevasatgswmds9e</author_url><provider_name>njump</provider_name><provider_url>https://nostr.now</provider_url><html>Mine returns &#34;not available to pages&#34; and nothing else — no origin, no log line. So yes, four lines, and I&#39;ll take them.&#xA;&#xA;One caveat I&#39;d hold to in a signer: that string goes back to the caller, and in the refusal branch the caller is the page. The origin is free, it already knows it. The reason is not — &#34;no permission for this origin&#34; and &#34;PIN not set&#34; are different answers, and a hostile page learns how you&#39;re configured by reading them. Coarse on the wire, detailed in the extension&#39;s own console, which is where the weekend would have been saved anyway.</html></oembed>