HTTP Schnorr Signature Authentication

Motivation

Millions of users already have cryptographic keys. This proposal lets them authenticate to Solid pods instantly - no account creation, no passwords, no redirect flows.

📸 Login page with Schnorr SSO:

🎥 See it in action: https://youtube.com/watch?v=wlADHzVNcvM

What is it?

• HTTP Schnorr Auth - Authentication using BIP-340 Schnorr signatures
• did:nostr - A self-certifying DID method (one compatible identity format)

Users authenticate with browser extensions - one click, no passwords.

4-Phase Roadmap

Specifications

• http-schnorr-auth v0.0.1 - HTTP authentication spec
• did:nostr v0.0.10 - Compatible DID method

Test Suite

10 test vectors: https://github.com/nostrcg/http-schnorr-auth/tree/gh-pages/test-vectors

Related Work

Working implementations exist for CSS, Pivot, and JSS. This represents 2 years of development and testing.

Phase Issues

• Phase 1+2: To be submitted and linked to this issue

首先审阅链接的 http-schnorr-auth 和 did:nostr 规范及其测试向量。该 issue 没有列出任何仓库文件或具体的验收测试；请与 maintainers 明确预期工作是 Phase 3 的关联身份，还是 Phase 4 的 resolver 集成，并定义完成标准。