Gzuuus on Nostr: Oops, forgot the repo link: ...

Oops, forgot the repo link: https://github.com/gzuuus/mimoty

quoting
nevent1q…7v02

Yesterday was demo day in #sec03 and I demoed a new relay I created called MIMO. The primary goal is to add a remote signing functionality to a personal relay, allowing you to set a root key in the relay that will be used to sign incoming events from subkeys or hosted keys (I'm still deciding on the final terminology, as 'subkeys' is a simpler concept but not entirely accurate, while 'hosted keys' is more accurate but slightly less intuitive). These subkeys/hosted keys can be created and managed in the relay dashboard, which uses NIP98 to protect the HTTP endpoints. When you create a new subkey, the relay will automatically sync the kind 0, 3, and 10002 events from the root key, simplifying the user experience and making the subkeys ready to use immediately. The process is straightforward: create a new subkey, import it into your preferred client or signer, and you're ready to go. You can then use the created subkey to publish content in the client of your choice, without requiring the client to be compatible with any new features. When you write a note signed with the created subkey, it will be resigned and broadcasted with the root key.
One of the key benefits of this relay is that you can create any number of subkeys, enabling use cases such as subkey-per-device. Additionally, subkeys have scoped permissions to publish, allowing you to define the specific kinds of events that a subkey can publish. Another feature of the relay is that it also function as a Web of Trust (WoT) relay, computing your WoT to allow your network to publish in the relay. In this case, events are stored as-is, without being resigned with the root key, whereas events from subkeys are resigned. The relay also actively stores the kinds 0, 3, and 10002 of your WoT, similar to the use case of purplepag.es relay. This enables correct delivery of notes to the inbox of the user you are chatting with.

!! Note that the implementation is still incomplete, and there is ongoing work to make this a more useful and secure tool.

nevent1q…neje