Join Nostr
2026-10-10 18:04:24 UTC
in reply to

ChipTuner on Nostr: I like plain webauthn, there is very little information that needs to be attached or ...

I like plain webauthn, there is very little information that needs to be attached or stored on the remote server on the credential that can I identify you, ideally it's literally just an EC public key. I store a minimal JWK on the user record in the DB. A random ID associated that the device needs to identify the stored cred, an algorithm id, and the X and Y coords. That's it.