Sure we could integrate Session, Nostr etc but that's a way too much work.
The next issue is account recovery when someone looses access to the key this can end up horrible, an account needs a good protection like 2FA.
Even if Nostr may be nice for some ppl it is super niche and not broadly used. Same with Session. In both cases you tie a service to a key, I the case with Nostr to an identity. I don't see a huge advantage in that case. You can generate a Nostr key just for Mynymbox but than, you forget to read the messages and locked out, lost data ...
I see too much risk for a customer to loose data and domains with keys only.
Replies (11)
As mentioned before I don't even use email. The remaining account I use, I check once every month. Then most email is spam or marketing and it's unencrypted in 99% of cases which makes it the worst tool for account recovery.
I use Nostr. I use SimpleX and it's easy to backup those profiles. Maybe even some internal message system that can be created with a seed and stored in a hardware wallet sending cc to Session, Simplex or Nostr would be the best way forward.
As said makes no sense for us at the moment and personally I don't see any issues with using an alias. Email is still the most used communication tool and in our business a must have.
We also don't have any resources for such developments at the moment since we have to spend most of.our time with extent our infrastructure, domains cost a lot of time with our volume, and VPSs as well.
And also I see a had he pile support tickets growing with key based logins.
Gaor enough. You certainly provide a good service. I'd encourage you to notvdismiss this because email has first mover advantage. There are much better ways to integrate this and that's what I would expect you to have on your milestones list. Not needs to happen now, but I'd be disappointed if you'd give me the same answer in two years.
People only sign up with email because you don't give them a second option. It's like with fiat companies.
Internal ticket system + cc to messenger
I understand your troubles maintaining the infrastructure and services, but I gotta agree the guy has a point. Think carefully about that, and when you guys have the time, try to implement something like what he said (nostr login, key pair, etc..), because although niche, this might indeed be an advantage for some customers (they are already niche anyway)...
You know, be the change you wanna see in the world lol
We don't have troubles with maintaining. The thing is I want avoid troubles by getting more tickets and offer an abuse heaven.
I got the point with the key of course. But also I questioning it with some points. One is what would be the benefit? If you use Mynymbox for web hosting for example.
When you run a hosting company like Mynymbox, it is super hard with abuse for example. Keys I do really believe this would offer a wider gate for shitheads. imagine just have a key, spin up a VPS In seconds and run a nice bot net.
We have thousands of customers, tons of privacy ppl, great customers with great projects, important projects. We have some kind of responsibility. So even if I got the point with key logins, this may be a risk for other customers because of super growing abuse and this may lead to take downs of infrastructure.
I just explain you guys the reasons for us to not implement it and our thinking about that key system. Of course it makes sense for VPNs or services like eSim where you do not really can loose something except a number or connections.
Fully understand your reasons bro
In fact it is not worthy for you. It's just an additional source of headache with little or no apparent benefit.
Hopefully some day in future we will move to a more decentralized and private service than email.
Email is decentralized, everyone can spin up an email server. How private you use it depends on you, you can use PGP.
