Attest — NostrComments

Attest holds your Nostr key so that a website never has to see it, and asks you before it signs anything on your behalf.

What it does

• Signs Nostr events for any site that asks, one permission at a time
• A global on/off switch, so you can silence it everywhere without uninstalling
• Refusals that expire — five minutes, an hour, or for good — and can be found and undone
• Optional PIN protection: your keys are encrypted at rest, and you choose how long the PIN is remembered
• Light and dark, following your system or set by hand

Where it comes from

Attest is a fork of nos2x-fox by Diego H. Gurpegui, which is itself a Firefox port of nos2x by fiatjaf. Almost all of the code is theirs, and like the original it is public domain under the Unlicense.

It differs in a handful of ways, listed in the repository — the largest being a fix for a flaw that let any website read the PIN protecting your private key.

No build step you have to trust

The file that ships is the file in the repository. There is no minifier and no obfuscator, so what you install can be compared line for line with the source.

Source: https://github.com/briskness-byte/attest