-

@ Dikaios1517
2025-05-06 21:34:51
Yeah, I am less concerned about the signing. That can be handled by giving the notifications service a separate bunker token that can be revoked if it tries signing things I don't want it to, or in the case of Pokey, I can just revoke its Android signer permissions.
I am definitely interested in the idea you have about locked permissions that you mentioned in the video.
And if push notifications can be e2ee... Could be a better solution all-around compared to email.
I am just spitballing here... Could any of this be combined with nostr:npub1mutnyacc9uc4t5mmxvpprwsauj5p2qxq95v4a9j0jxl8wnkfvuyque23vg's server-side secure enclaves to enhance the privacy of any of this? Any insight nostr:npub136jg2fnty2z5vwcnh7p4jpckrs3tk0dpueftgs7mznuuaenjpfps6tjnxf?