irony: censored in nostr-protocol github 😇

hey David. every existing proposal has the same flaw: if an attacker has your nsec, they can publish the same migration event you can. you can't prove who did it. i am proposing below a scheme that fixes this using a hash commitment published on day one, a sha256 of a passphrase that lives only in your head (a password or something). attacker can't rotate without knowing it. if they try, the fraudulent rotation is cryptographically distinguishable from a legitimate one. key theft becomes detectable, not just disruptive. draft NIP:

GitHub

NIP-XX: Key Commitment and Theft-Proof Rotation · Issue #2237 · nostr-protocol/nips

NIP-XX: Key Commitment and Theft-Proof Rotation draft optional Motivation Nostr identity is a keypair. If your private key is compromised, current ...

check it out, and let me know your thoughts! #nostrbuild #keyrotation #cryptography

inspire, love, effect 🌱