Dɔnniya basigilen / Daamu

Identité ani doncogo

Kɔntisɛl tɛ, e-mail tɛ, paswɔd tɛ. Kele bɛ, nka cɛliɲi bɛ kɛ i ka a dɛmɛ kosɛbɛ kɔ.

Nin ɲɛ in bamanankanna ni masin ye walasa ka nɔgɔya. Angilɛkan original ye version ye min bɛ tali kɛ.

Kilisi, jatew tɛ

I ka kɛnɛya ye Nostr keypair ye. A tɛgɛ bɛɛ (an npub) ye ye fɛn de ye service kɛnɛ ye; a sabɛn kɛnɛ (an nsec) a bɛ i kɛnɛla la, ani a bɛ i la sigin.

I nùm — i ye kɛlɛ kɛra i ye nùm ye — ko kɛlɛ ye. I nùm fɔlɔ saba kɛnɛ ye i ka kɛlɛ kɛnɛ la, ani o ye kɛlɛ kɛra kɛ nɔgɔ nɔgɔ ye. alice ɲɛmɔgɔ tɔgɔ bɛɛ fɔ ɲɛmɔgɔ tɔɔrɔ la.

Iru kɛnɛya kura ye

• Ɲɛ̃nyɛ cogo kelen kura sɔrɔ. Y'a fura kɔrɔ fɔ kɔnɔ fɛɛrɛ kɔnɔ.
• Talo... nsec. A bɛ tɔgɔ tɛgɛtɛ ye — ... la Nymchat tibun ya walli Nostr application kɔrɔ kɛnɛ ye — a ka credits ni a ka Nymbot kɔrɔ ye.
• Browser extension sanu dɔ (NIP-07). Kili bɛ kɛnɛkan dɔ kɔnɔ k’a tɛ lɔgɔ dɔ kɔnɔ fɛ; app b’a bɛɛ a fɛ ka sigi.
• Sigan kɛnɛ kɛman nɔɔ (NIP-46), n'i ka i ka kili (key) bɛɛ kɛla kɛnɛ dɔw fɛ.

Ɲɛnɛɲɛn kɛ kɛnɛ kɛɲɛ dɛɛrɛ de mɛn kɛ kɛnɛ dɛɛrɛ la, a bɛ i ye kɛnɛ kɛnɛ dɛɛrɛ de dɛ mɛn. Bɛɛ tɛ bɛɛ fɛ, nka kɛnɛ kɛnɛ dɛɛrɛ de bɛ kɛnɛ kɛnɛ dɛɛrɛ la.

Fájé kɔnɔ-kɛ-dɔ

Sɛ i kili bɛ signer app kɔnɔ, choosi N bɛ n fɛ n ye kɛnɛ dɔ ye kɔnɔ., nankali Siri kɛ kɛnɛ-fɛn (remote signer) fɛ. Fila o bunker:// i ka sigun-tira link b'a ye, alo funa Kɔdɔ kɛ kɛnɛ ye ɲɛ? k'a kɔlɔsi (alo a ka link bɛɛn k'a sɔrɔ) n'i bɛ kɔnɔ bɛn-panyatigi la. Kɔlɔsi bɛ kɛ wss://relay.primal.net so n'i tɛ relay kɛ kɛnɛ kɛ munu fɔ, Nymbot bɛ kɛ nɔɔni kɛmɛ min bɛ dɔ kɛ dɔ kɛ munu fɔ, sigun-nin kɛ kɛmɛ fɛ, ani Cancel kɛmɛ fɛ.

Kili tɛ kɛ ka sɔrɔ Nymbot ye. Ɲɛɲɛ bɛ kɛ Nymbot bɛ sinili kɛ wala a bɛ decrypt kɛ, a b'a a la sinili-kɛlɛ ye, ni... I n'na k'i bɛ i ka saba kɛ n'a la... appears when an answer takes more than a second. A signer can ask you to approve the request on its own web page; Nymbot shows a button for it and opens it only when you tap it, and only if it is an https page. Nymbot accepts answers only from the signer you paired with, checks every signature it returns, and does not trust a code scan that does not echo the connection secret back.

N'tɛmɛɲi bɛ kɛ tɛmɛ bɛɛ kɔfɛ Remote signer ye kɛra k'a fɛ i ka ye kɛnɛya kɛ:. O tɛ mɔgɔ kɔnɔ mɔgɔ tɛ nsec ka tɛgɛ kɔnɔ, so i ka kɛnɛya koli fɔli kɔnɔ kɛ, i ka post-quantum recovery code kɛlɛ mɔgɔ tɛgɛ kɔnɔ, k'a fɔ i ka kɛ i ka kɛ dɔnɔ kɛra k'a fɔ. SiniyɛlɛkaƝɛmɔgɔ bɛ kɛɲɛga... signs this device out and wipes it, but it does not delete your synced copy, which comes back when you sign in again with the same signer. Anonymous mode a bɛ a ka kɛnɛya kɛrɛnkɛrɛn kɛ nɔgɔ kɛ, a tɛ sigi kɛ sigana fɛ ɲumɔgɔ bɛɛ ma.

Identité encryption (daɲɛw sirili).

A bɛ se ka tɛ, n'a tɛ i ka kɛla kɛ i ka a fɔ k'a tulu n'a bɛ i ka... Ɲɛmɛya sheet. With it on, the secrets Nymbot keeps on the device are encrypted, so they cannot be read out of the device's storage without unlocking:

• i ka private key, o k'i ka remote signer kɔnɔkɔnyɛ, ni a ka post-quantum root,
• o bɛ Anonymous Mode kili kili kili fanga ni a kili kili kili fanga fɛ,
• i ka fɛnmarayɔrɔ ani kuntigi tɔɔrɔw,
• the keys to chats you link k'a fɛ k'a fɛɛn ye fɛɛ kura,
• n'a fana, Android ani iOS appow la, kɛlɛw bɛ k'i sɔrɔ k'i fɛɛrɛw ka dɔgɔtɔ.

Nymbot ka kɔlɔn ka taga fɛɛrɛ tɛmɛnɛ lakana kɔnɔ, nka fɛɛrɛ bɛɛ tɛ kɔrɔkɛ, tɛ bɛɛ tɛ sɔrɔ wala a bɛɛ tɛ a yira k'a dɛmɛ k'a sɔrɔ fɛ. A kɔrɔkɛ fɔlɔ nɔɔrɔ tɛ kɛ nɔɔrɔ ye.

What it protects is the copy on the device, against someone who gets hold of the device or its storage. It does not change what is sent or what the server sees, and it is not a backup.

Baŋ dɔgɔtɔ, passkey walla biometiri

I su mɔɲi i ka fɛɛ, dɔdɔ dɔ dɔ kɛ:

• Fɔli bɛɛ kɔrɔfɛli a bɛɛ kɛ kɛnɛ kɛnɛ tɛmɛnɛ nana nɔɔw. Ɛ bɛ kɛlɛ bɛɛ la.
• Kɛli kɔrɔ, web app kɔnɔ. A bɛ se ka kɛ dɛmɛtɔrɔ kɔnɔ, password manager kɔnɔ walla security key kan, nka a ka fɔ ka WebAuthn PRF extension kɛ, o ye yeelen bɛɛ fɔ k’a dɛmɛ passkey k’a fɛ k’a kɛ encryption key ye. A tɛ se ka kɛ o ye ko a tɛ WebAuthn PRF extension kɛ a ye, o bɛ se ka dɛmɛ ka fɔ a tɛ, nka a bɛ se ka passphrase kɛ a fɛ.
• Biyometiri: kɔrɔsɔkɔ, i kana, nɔɔra Windows Hello. Web app kɔnɔ o bɛ device ye kɛnɛya kɛnɛya bɛɛ kɛ, nka o tɛ Apple device yo la, k'a fɔ passkey bɛ Face ID o tɛ Touch ID ye kɛ. Android kɛnɛya kɛnɛya (app) ni iOS app kɔnɔ, o bɛ kɛ ni device ye kɔrɔsɔkɔ o tɛ kana kɛnɛya kɛra.

Web app kɛnɛ kɛra fɛn kɛnɛ deɛ kɛ mɛn tɛ passkey kana de fɛ, nka Android ani iOS app wɛrɛ kɛra passkey deɛ kɛ ya biometrique deɛ kɛ.

The same sheet changes the passphrase, switches to another method or turns encryption off, each after confirming the current method. Whatever unlocks it stays on the device: no passphrase, passkey or salt is synced, so each device is set up on its own.

Mun bɛ n'i ye kɛnɛya kɛ i ka kɛlɛwadenanw la?

Your settings travel between the devices you sign in on inside a record that is end-to-end encrypted with your own key, so the server stores a sealed copy it cannot read. That includes your workspaces, bots, memory, saved prompts, schedules and folders, and your repository and connector tokens, so a chat that uses them works on a new device without setting them up again.

Token kɛlɛya kɛ kɛlɛya (devices) duwalo kɛra kɔ, kɛlɛya fofon faga kɔ, o kɔrɔ kɛra dugu (repository) kɛlɛya kɛ kɛlɛya dɔ kɔ kɛ, o kɛlɛya kɔrɔ kɛra a kɛlɛya (token) kɔ dɔwalo kɔ. Connector kɛlɛya kɛlɛya kɛ kɛlɛya dɔ kɛra, o kɛ kɛlɛya dɔwalo kɔ.

Ɲɛmɔgɔ bɛ kɛnɛ bɛɛ la ye i ka dɔni-dɔni mɔgɔya kɛnɛ ye, ani fɛɛrɛ bɛɛ bɛ kɔnɔ na a ɲɛ... ɲɛgɛ sɔsɔ kɛlɛ.

I ka kɔnɔba bɔ

Account kɛlɛn tila ni masini kɛlɛn tila., Settings la, Account kɔnɔw fɛ ni Identity kɔnɔ, a aana kɛlen, nka a bɛ i ka account bɔ. K'a fɔ ko key bɛ kɛ k'a tɛgɛ, a bɛ server ka dɔnniya kɛ, key ye bɔra, ka bɔ u bɛ account kɔnɔ kɛra u ye: i ka chat kɛlaw ni settings kɛlaw k'a sync bɛ dɔnniya, i ka Nymbot kɛla kɛla ni nɔgɔw, background tasks, schedules ni pull request watches, i ka linkw u i bɛ fɛ k'a sɔrɔ, i ka credit balance ni a ka ledger, i ka sɔrɔ kɛlaw, invoice ni voucher kɛlaw, ni i bɛɛ... API holds for it: every API key, which stops working at once, the query history, usage records, a saved auto top-up wallet, video jobs and any charges still owed. Then it destroys everything the app keeps on this device: your key, every conversation, your repository and connector tokens, stored documents and cached files. It shows Kɔrɔ kɔnɔ bɛ kɔrɔya kɛ nɛ a ka kɛ, ani app bɛ kɛlɛ kɛ bɛɛ kɛrɛn.

Before the server data is deleted, the app stores a small marker signed by your key: its public key, a time, an event id and the signature, nothing else, kept for 90 days. Every other device signed in to the same key checks for it when it opens, comes back to the foreground, before it syncs, and every few minutes, and wipes itself instead of uploading your data again.

A bɛ se kɛ nɔgɔ kɛ nɔgɔ ye ka fɔrɔ ka fɔrɔ kɛ la Nostr relays la, walla i ka kɛnɛya kɔnɔ (key backups) i ka sɔrɔ iCloud walla Google Drive la. I ka Nymbot credits fɛlɛ ka fɛlɛ i ka kɔnɔ (account) kɛ fɛlɛ kɛ, a bɛ se kɛ ka fɔrɔ ye; ko kɛ Move my whole balance Oɲumɔnu fɔlɔw ye ka dɔrɔn.

A tɛ kɔngɔ dɔ kɛ ye, k’a tɛ se ka kɛ dɔ kɛ ye fɛ. Ni i ye i ka nɔgɔ bɛɛ kɛ ye i ka... nsec i bɛ se ka kalan kɛ kuli kɛɛ ni i ye kili kɛmɛ, i tɛ i ka chatwɛ tɛ; nala i tɛ i ka kili kɛ, o koli dɔn ye.