The final major piece I have added to #nostr #safebox - encrypted blob storage and transfer using Blossom.
You can see it in action below.
I use Blossom servers to store and transfer the original records. They are encrypted before storage and during transit. Every blob has a randomly generated encryption key and ephemeral nsec as the author. The information gets passed between safebox instance using quantum-safe key agreement for encryption. Once the blob is transferred, re-encrypted to a private record, the transfer blob is deleted. Also the hash is checked to make sure it's the same as the original record.
This whole scheme is agnostic to the blob type, it's just binary- for now I am supporting jpg png and pdf but it can be extended to any format.
This also is working with the
@nosfabrica web of trust, so not only will you be sure you have an original record, but you will also be able to cryptographically link it to who issued it to you, and whether you trust them.
Finally, this is being designed to be totally decentralized, so no gatekeepers. You will be able to convey original records privately and decide who you trust on your own terms.
Onward!