Tim Bouma on Nostr: What’s really cool is that I’ve landed on a pretty straightforward app ...

What’s really cool is that I’ve landed on a pretty straightforward app coordination protocol.

1. Front-end web app presentation (HTTP GET/POST)
2. App dynamic interaction (Websockets)
3. Back-end data transfer (NIP-01, NIP-44, NIP-59 + PQC)

All sensitive data goes through the back end. TLS is not relied on for back-end security.

quoting
note1t32…5n5q

It's been a heavy lift, but the past few weeks have been dedicated to making #nostr #safebox #quantumsafe.

For individual #safeboxes, they will have a separate encryption key that is never exposed via a public key. For transmission of records, payload are additionally encrypted using key encapsulation method (KEM).

Onward!