Thoughts on:
- Just a login screen/page/popup.
- Login with extension, or with remote signer, or with bunker, or with email+username+password combo (this would be the main/top method).
- With that email+username+password combo, it would generate an npub/nsec pair with a standardized script.
- Users can use this combo to always login to the same npub/nsec pair.
- This is generated/stored/used locally
- It's unsafe, but more safe/convenient and intro-friendly for normies than 'click to generate address pair', as its a familiar feeling
- The user still maintains custody
This is basically similar to a bitcoin mind wallet.
This should be used as an optional intro for normies, but clients should definitely show prompts mentioning that this is not advised/optimal and they should create a new account using an extension or remote signer, etc.
(a quick visual representation. There'd be just a "login" button in the navbar or app, and they'd see this. It's missing text that warns the user that this wouldn't be advisable). This seemingly less daunting for a normie user, I'd assume)
It's be an interesting 'temporary' option as a buffer for transitioning normies to the proper process of nostr.
It's the more secure and more convenient version of a brain wallet, but still bad and we'd constantly remind users to switch/move accordingly.
Thoughts?
#nostr #nostrdesign #asknostr