I don't know why everybody thinks rotating keys is essential. That seems to be a meme that came from nowhere and suddenly everybody thinks this is to be expected.
The truth is that it is not possible to do the perfect delegation scheme without a centralized entity controlling the keys, like Bluesky has on their centralized server, or using a blockchain. And if we're going to have something that is a good-enough solution, Pablo's NIP-41 proposal is pretty good for the disastrous cases of lost keys.
Also having this delegation scheme by itself doesn't imply key rotation is solved, I think these are different problems.
I think we'll end up having good NIP-46 support and that will fix most things.
fiatjaf /
npub180…jh6w6
2024-07-13 14:19:20
in reply to nevent1q…27uk
Author Public Key
npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6Published at
2024-07-13 14:19:20Event JSON
{
"id": "93f7ccc80851c0312e071acad3b27fb5f90f9d90ab80333049b205f6d0039fdb",
"pubkey": "3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d",
"created_at": 1720873160,
"kind": 1,
"tags": [
[
"client",
"gossip"
],
[
"p",
"7bdef7be22dd8e59f4600e044aa53a1cf975a9dc7d27df5833bc77db784a5805"
],
[
"p",
"fa984bd7dbb282f07e16e7ae87b26a2a7b9b90b7246a44771f0cf5ae58018f52"
],
[
"p",
"ee11a5dff40c19a555f41fe42b48f00e618c91225622ae37b6c2bb67b76c4e49"
],
[
"p",
"32e1827635450ebb3c5a7d12c1f8e7b2b514439ac10a67eef3d9fd9c5c68e245"
],
[
"p",
"bfc058c9abb250a2f4f0f240210ae750221b614f19b9872ea8cdf59a69d68914"
],
[
"p",
"44dc1c2db9c3fbd7bee9257eceb52be3cf8c40baf7b63f46e56b58a131c74f0b"
],
[
"e",
"bd82bc2fa87925e00df67010a5b590c79904ca4a2d10ff1b53a3b938acf6d3bc",
"wss://nostr.mom/",
"root"
],
[
"e",
"8e542bf68b8d2f976d7cbc054b62f0cf952c238d48e4b0ee2838cbeeb6085868",
"wss://nostr.mom/",
"reply"
]
],
"content": "I don't know why everybody thinks rotating keys is essential. That seems to be a meme that came from nowhere and suddenly everybody thinks this is to be expected.\n\nThe truth is that it is not possible to do the perfect delegation scheme without a centralized entity controlling the keys, like Bluesky has on their centralized server, or using a blockchain. And if we're going to have something that is a good-enough solution, Pablo's NIP-41 proposal is pretty good for the disastrous cases of lost keys.\n\nAlso having this delegation scheme by itself doesn't imply key rotation is solved, I think these are different problems.\n\nI think we'll end up having good NIP-46 support and that will fix most things.",
"sig": "decff86676c65facbe59157d97407015b91055aeff4de6ad370db3710b6012325f53ae065f866b6d52335ce91831344408150911e92baba5b7d1dbfa4bf341e4"
}