Add Alby Hub wallet

[reneaaron]

Adds Alby Hub, listed under desktop (Windows, Mac, Linux).

About the wallet

Alby Hub is a self-custodial Bitcoin and Lightning wallet for individuals, developers, and businesses. It includes an embedded Lightning node (LDK), supports on-chain send and receive, and connects apps, services, and AI agents through Nostr Wallet Connect (NIP-47). The same app runs on desktop or self-hosted on a server.

• Website: https://albyhub.com
• Source: https://github.com/getAlby/hub
• Released: October 2024 (>3 months ago)
• License: Apache-2.0
• Developers: Alby (https://getalby.com), team identities public on GitHub
• Bug reports: https://github.com/getAlby/hub/issues

Classification

• Level: 2
• Platform: desktop (windows, mac, linux)
• Features: bech32, lightning, segwit

Scoring rationale

Criterion	Score	Reason
Control	good	Users hold the seed and have full custody
Validation	fail (centralized)	Default chain source is a single Alby-operated Esplora server (electrs.getalbypro.com). The endpoint is user-configurable to any Esplora/Electrum/Bitcoind RPC, but bitcoin.org grades default behavior.
Transparency	acceptable	Open source, releases tagged on GitHub
Environment	caution	Runs on general-purpose computers, no 2FA
Privacy	acceptable	Address rotation; discloses to central chain source; no Tor support today
Fees	good	Full control over on-chain fees

Checklist against the wallet criteria

• Released > 3 months ago
• Source public, releases tagged
• Public team / developer identities
• HTTPS on albyhub.com, HTTP 308 → HTTPS
• Bug reporting via GitHub Issues, linked from the site
• Address rotation, deterministic ECDSA, user-controlled keys
• Wallet backup + seed recovery supported
• Screenshot 250×350 PNG, optipng -o7 applied
• Icon 144×144 PNG, optipng -o7 applied
• Description under 320 characters
• albyhub.com HSTS currently has `max-age=31536000` but is missing `includeSubDomains; preload`. Binaries are distributed via GitHub Releases (already HSTS-preloaded), so the executable transport is protected — we'll harden the landing-page header as a follow-up.

[crwatkins]

Thanks for your submission! Extra thanks for reviewing all the listing criteria so thoroughly. Just wanted to let you know that there's a bit of a review backlog currently and thank you for your understanding.