I recently got a Safe 7 device and really love both the UX (first use, recovery from seed) as well as the physical device itself - feels “nice hardware” (Borat voice mandatory). I’m hoping to turn this into a “personal trust root” kind of device with the seed backup as a separate process taking care of the business continuity, if done well. A few topics I’d like to (or let a clanker) work on:
- NFC - a nice “timed” (the snake going around the screen once enabled) authenticator, you can tap with a phone (the current USB-only experience is not enough)
- biometric auth via yubikey bio - shove one yubikey bio fido token into the usb port, and authenticate via ctap2 as (extra? only?) vector to unlock the safe. FIDO can work both ways!
- This is embedded device with screen under some menu, ability to list the credentials on device (rather than external app like yubikey authenticator)
Are any of these of interest to the wider community or trezor devs? I see there is some activity in recent firmware commits when it comes to NFC, but still early. Ideally, it would be nice if this could be achieved with 3rd party apps, but I’m also thinking of flipping the bootloader just to enjoy the hardware while working on core app. Are any of the above physically (hardware does not permit) or philosophically (does not play well with trezor design principles) infeasible?
thx,
mrtn