this post was submitted on 09 Sep 2026
626 points (98.9% liked)
memes
23135 readers
1847 users here now
Community rules
1. Be civil
No trolling, bigotry or other insulting / annoying behaviour
2. No politics
This is non-politics community. For political memes please go to !politicalmemes@lemmy.world
3. No recent reposts
Check for reposts when posting a meme, you can only repost after 1 month
4. No bots
No bots without the express approval of the mods or the admins
5. No Spam/Ads/AI Slop
No advertisements or spam. This is an instance rule and the only way to live. We also consider AI slop to be spam in this community and is subject to removal.
A collection of some classic Lemmy memes for your enjoyment
Sister communities
- !tenforward@lemmy.world : Star Trek memes, chat and shitposts
- !lemmyshitpost@lemmy.world : Lemmy Shitposts, anything and everything goes.
- !linuxmemes@lemmy.world : Linux themed memes
- !comicstrips@lemmy.world : for those who love comic stories.
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
So, there's not really "a signup" to use Nostr. That would be similar to saying "the signup" for ActivityPub – it's just not specific enough for me to understand where you found this signup thing.
But also, you don't really need to sign up anywhere. You just need a keypair. You can generate that offline, or use a trustworthy site to generate it "offline" in your web browser with JavaScript so the private key is never sent over the wire.
No idea what the Google login thing was. If I had to take a wild guess, maybe you found some place that also offers some key management/signing features as a way to make things more user friendly?
If it helps, the first Nostr client I ever tried was Iris.to. I think Primal might be the most popular though.
(This might be the extent of my Nostr knowledge. I was never a frequent user, and haven't really thought about it in months.)
https://nostr.com/
I'll buy that. I just have trouble squaring things like that with things like gpg-agent and how they cache passphrases and keep them from swapping to disk, etc. I'd want to know more about it and whether it's generated in the browser or on the server. I'm also not even sure how I'd go about doing some sort of review of the javascript algorithms or where their random numbers come from. I'm not throwing shade on them; I just don't know.
I'll look.
FWIW, most of these web-based Nostr clients are just static JS files. They're SPAs that connect to the relay servers (via WebSocket, IIRC). You can open up your browser's devtools, go to the "Network" tab, and see what's happening.
I don't think I'd trust one that does any server-side rendering. No particular reason (though I'm sure I could think of some) other than it just wouldn't feel right for Nostr.
I'd guess they just use the native WebCrypto APIs, but I have not verified. More info on native crypto APIs available in JS here:
(FWIW, every Node.js distro I've ever used leveraged OpenSSL for those, under the hood. I imagine other runtimes do too.)
I hope so. Crypto is a weirder beast than some things because numbers can look random and not be without much, much deeper inspection: https://www.openbsd.org/papers/bsdcan14-libressl/mgp00001.html