Josh on Nostr: Thanks. A random web app can't ask, actually. Every client has to be paired with a ...

Thanks. A random web app can't ask, actually. Every client has to be paired with a one-shot token the device mints and you approve on screen, so an unknown client is rejected outright, not prompted.

Per-client is where selective is heading. The idea is you set your own rules rather than me picking a fixed list: which client, which kinds, auto or prompt, and other variables like when. Auto-sign notes from my main client during the day, prompt for everything after midnight, cap zap requests at an amount, that kind of thing. Still a work in progress, but that's the shape of it.