I'm gonna shill this blog post I wrote some time back: https://www.ledger.com/blog/towards-a-trustless-bitcoin-wallet-with-miniscript
If you don't trust a signing device, it's really hard to meaningfully use it without additional devices - I don't think creative paths can help much. For example, a device could lie about the xpubs you ask.
salvatoshi
npub157…e60gr
2025-05-02 21:21:57
in reply to nevent1q…ysxc
Author Public Key
npub157y6gz0l0rfhw220rfwnujeff6q2mec33nzkwz23umkrt6482exq8e60grSeen on
wss://nostr.oxtr.devwss://nostr.bitcoiner.socialwss://nostr-verified.wellorder.netwss://relay.damus.ioPublished at
2025-05-02 21:21:57Event JSON
{
"id": "18b4120570c30a0b0b3da0f7eacdbad5a29ce40fc8a1fdd6d32e63cf56620c5f",
"pubkey": "a789a409ff78d377294f1a5d3e4b294e80ade7118cc5670951e6ec35eaa7564c",
"created_at": 1746220917,
"kind": 1,
"tags": [
[
"e",
"8c5ffbfc5c0ca1101bca9722243e01cf5712f2a1e67380b73f7c183ded1f77b2",
"",
"root"
],
[
"e",
"76f16c9a7d8c8ceb2bdddbf5f33763ffda5b349a629c3baa966ee1764225f94f"
],
[
"e",
"77031a6987ba1c1ec979e1c3d3544230b688bb445046ca035fd146198cf66d4c",
"",
"reply"
],
[
"p",
"a789a409ff78d377294f1a5d3e4b294e80ade7118cc5670951e6ec35eaa7564c"
],
[
"p",
"675b84fe75e216ab947c7438ee519ca7775376ddf05dadfba6278bd012e1d728"
],
[
"p",
"0f28196ced1024be7ceb3d7b194337bf8f21e7ad0a8be803b1ec0a7c52e926de"
],
[
"p",
"0d97beae567fcec9c6574f1c6ef6126ea969d4992c3198e51c0fac52c5274a14"
],
[
"r",
"https://www.ledger.com/blog/towards-a-trustless-bitcoin-wallet-with-miniscript"
]
],
"content": "I'm gonna shill this blog post I wrote some time back: https://www.ledger.com/blog/towards-a-trustless-bitcoin-wallet-with-miniscript\n\nIf you don't trust a signing device, it's really hard to meaningfully use it without additional devices - I don't think creative paths can help much. For example, a device could lie about the xpubs you ask.",
"sig": "90de9aaf7026a4c5cbd20696e64ba701a9d3b96a881fb784cc6b4aceb2dacc302587e4e809070a28c2b9888133f0257c5834f111b762dd319528c8617bf1cf20"
}