2026-01-12T09:36:57Z https://nostr.ae yas https://nostr.ae/npub1x8c26vdzu4v8my7ujljph2f73syql0kyd08ae0h4tk3gr22fdufqc38fl0 https://nostr.ae/nevent1qqsdg6x3dya3g83zxegqheemuvdq6qdwee8p9a9umrsjrnp6d95lhfgzyqclptf35tj4slvnmjt7gxaf86xqsra7c34ulh9774w69qdff9h3yrqeqfn In reply to <a href='/nevent1qqsd4lf4zepc3gvs2zleyz7vwe0f782rj0kwen8uw2vymr23nf8uedsprdmhxue69uhhyetvv9ujuumwdae8gtnnda3kjctv8g6nw27eyyx'>nevent1q…eyyx</a><br/>_________________________<br/><br/>Re 5. The passkey is used explicitly for the wallet.<br/>Re 6. A regular user doesn&#39;t store his passkeys in his desktop, and the passkey stays in his phone or physical key and only the prf result is sent to the desktop. <br/><br/> 2026-01-13T14:29:18Z https://nostr.ae/nevent1qqsgwcd8nl389v8gttvhvz5xzec8ntve7e3c889w3v5l6elahvyy7yszyqclptf35tj4slvnmjt7gxaf86xqsra7c34ulh9774w69qdff9h3ygqhpnc In reply to <a href='/nevent1qqs2ckgpdzfvcxgjpyrj40znu449c5tllaaqrd68dkqcfs39y9ze7gqpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhg0x5pn7'>nevent1q…5pn7</a><br/>_________________________<br/><br/>1. The client can regularly check the relays and republish the list of salts if they are deleted.<br/>2. Every vendor can setup their own relay.<br/>3. The list of salts is backup-ed automatically by ios/android because its in the app data and is not &#34;secret&#34;.<br/>4. The same list can be exported by the client to a simple text file if the user wants a wallet independent backup and doesn&#39;t want to run any app using this protocol for a long time.<br/>5. Passkey rotation is generally not needed because the secret part of the passkey is not supposed to leave the TEE except when migrating from one vendor to another (using a secure protocol like CXP). In the exceptional case of a passkey compromise, the user can always move its funds to another wallet using a new passkey.<br/>6. The UX cost of using iCloud/GDrive is very high (login, vendor auth) 2026-01-12T13:15:17Z https://nostr.ae/nevent1qqswdc03lexzfcp5nr3e3sm6p9u6r8wmrrsndcm792v6ufhs3ujsefczyqclptf35tj4slvnmjt7gxaf86xqsra7c34ulh9774w69qdff9h3yzxt6tl In reply to <a href='/nevent1qqsx5g9f6whsl3da2s600sryqej6vzsth6k8skxt4mmz7fd0652alrspzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhgqmacg2'>nevent1q…acg2</a><br/>_________________________<br/><br/>The primary salt is an hard coded string defined in the protocol. Using it the list of the salts used by the same passkey can be obtained from the relays.<br/>If by &#34;the user trusts his nostr relays to store the salt&#34;, you mean to trust the relays to not delete them, trusting iCloud/GDrive is not better.<br/>Also, Breez intent is to mitigate the trust by handling a relay dedicated to store the salts. 2026-01-12T09:45:44Z