Nico Krause

OrbitDB with hardware secured keys and UCAN permission management in p2p web apps (Part I) About OrbitDB identities, authentication with WebAuthN — varsig, ed25519, p-256 and UCAN authorization in P2P apps

Local-First & P2P web apps with WebAuthN hardware secured signing OrbitDB entries, #DIDs and also #UCAN's via #WebAuthN varsic envelops! medium.com/@seidenwege/...

Roboter auf Bielefelder Gehwegen: So sollen die „Teutobots“ im Alltag helfen In einem Bielefelder Wohnviertel sollen bald vier autonome Roboter-Shuttle anrollen und den Menschen auf kurzen Strecken Einkäufe und schwere Lasten abnehmen.

www.nw.de/lokal/bielef...

@ericvor.bsky.social Ich musste an Lastenradanbieter denken. Vielleicht sollten sie das Angebot diversifizieren? Bei uns fahren die in manchen Städten auch schon herum. Persönlich habe ich noch keine gesehen.

My Three Month Journey with PLDG For the past three months I have had the privilege of being part of the Protocol Labs Dev Guild program.

medium.com/@fyattani/my...

@seidenwege.bsky.social will be talking about "P2P apps with libp2p, @ipfs.tech and OrbitDB", at @fosdem.org '26 #Local-First & #CRDTs devroom!

Come listen to the 25 speakers on 1st Feb, from 9:00 at #FOSDEM in Brussels.

It is free! more details:
openlocalfirst.org/schedules/#1...

See:
- js-libp2p examples github.com/libp2p/js-li... (for NodeJS or browser but there's also python examples somewhere)

and proto.school/introduction...

- libp2p over http (and http via libp2p)
www.youtube.com/watch?v=qJdA...

if you want to "emulate" ssh via libp2p - chatgpt is your friend

libp2p is usually 'noise' encrypted - but there's a tls package too in js-libp2p. Should work with all kinds of languages e.g. javascript, python, java, rust, go,...

if you like to make IoT devices work p2p, maybe check #DePin which I didn't do yet! (Depends...) Not sure if ssh is necessary!

This is how my 2025 ended! (very proud) #libp2p #yjs
Looking confidently forward to 2026!

github.com/libp2p/unive...

YouTube video by seidenwege Browser-Only UCAN delegation chaining with WebAuthN generated Ed25519 DID on @StorachaNetwork

For clarification: I have another UCAN demo with WebAuthN+PRF ed25519 DID with encrypted ed25519 keystore. (including delegation chaining and revocation) working which works classic https via @storacha.network so far www.youtube.com/watch?v=3Zqk...
I might want to put it all together.

YouTube video by seidenwege Universal Connectivity Hackathon - libp2p/YJS Spreadsheet UC integration with UC extension protocol

I remember Fission from #labweek23 in IST and #libp2p at the time! Last week I've build an experimental js-libp2p #yjs spreadsheet demo which additionally can be read/written via "Universal Connectivity Extension", Probably AI ready. I thought p2p-UCAN's are needed. www.youtube.com/watch?v=CtKY...

I have seen there's a transport package inside ucanto monorepo - does anyone know a project who did UCANs via libp2p transport including revocation or would that be still open? @expede.wtf

GitHub - NiKrause/dkg-orbitdb: DKG with OrbitDB: Decentralized Key Generation Demo DKG with OrbitDB: Decentralized Key Generation Demo - NiKrause/dkg-orbitdb

En-/Decrypting in browsers is risky. Better make js-libp2p-PeerId, browser identity keystore temporary and always unlocked/derive via a e.g. "OrbitDB-DKG" with mobile in same wifi/bluetooth network to keep local-first "offline capabilities"
github.com/NiKrause/dkg...

Storacha does not P-256 upload yet, but it would be extremely nice for EIP7702 passkey wallets!
I now need a
1) hacky ed25199 (identity) key deviation from WebAuthN and a ed25119-DID for Storacha/Filecoin AND
2) encrypt OrbitDB keystore with some DKG (for browsers) or just WebAuthN for mobiles

Thx! OrbitDB has ed25119 identity keystore as IPFS/js-libp2p, I could probably use WebAuthN-P256 keys, would still end up with two different keys e.g. PeerId/Helia. I saw ts-ucan-P-256! I 'merged' into my ucanto fork for storing the P-256 credentials + OrbitDB backups on Storacha via P-256 UCANs.

If the encrypted shareable todo-lists work with WebAuthN securely and reliably (which seems still quite a stretch), I'd like to assign todo's to other DID's with a write permission on oplog entry level. Group write permissions might be handy on a todo-list db level. Still learning every single day.

just applied ... thanks!

This sounds like my taste. Without a backend! And Svelte makes absolutely sense to reduce complexity in LoFi apps!

I am wondering if If it makes sense to integrate local-first access control with keyhive into local-first peer-to-peer apps with OrbitDBAccessControllers. I just found your project lately and saw a talk about it. So interesting I thought, I should take a closer look!

Oh thanks a lot for all the important work and initiatives! I adore it a lot! I just joined blue sky today! So can probably still apply...