100 sats \ 2 replies \ @supertestnet 12 Jul \ parent \ on: Nostr subkeys nostr
My overall point is, you can do this right now. Nothing is stopping you. Create a master key, back it up, create a hot key, and sign a message with your master key saying "this is my hot key: <insert_hot_key_here>"
Now start using your hot key for everything, and if you ever lose it, sign a new message with your master key saying "this is my new hot key: <insert_new_hot_key_here> this hot key is no longer valid: <insert_old_hot_key_here>"
Nip 26 and nip41 formalize a way to do this but even if you can't find software that supports those nips, you can just do it manually for now and then nag devs to automate it for you via those nips or better ones
I recommend not waiting for "Santa" (devs) to do stuff for you. Start doing it and devs may follow.
Two points well taken.
(1) Do stuff yourself.
(2) "My new hot key..." profile announcement on master.
This "profile announcement" technique has occurred to me and I may well do it one day.
The only downside is the bad actor still can pretend to be you in the "no longer valid" hot wallet. Bad stuff coming from my username and my avatar going out to my followers is a bad look. Gonna guess very few would ever do the legwork on corroborating things by checking my "master key" profile with its "this key is no longer valid" announcement. Frankly, who'd even know to look for such a thing?
The takeaway I'm gathering here is that it's simply not possible to "burn" a private key/nsec (to neuter its ability to do anything) and transpose the "account" (followers, notes, etc) to a new one. 😞
reply
The only downside is the bad actor still can pretend to be you in the "no longer valid" hot wallet
Sure but probably not for very long, word gets round
As soon as he does something bad people will stop following him and say "yeah I don't like so-and-so anymore because of X bad thing" and then someone else will tell them, "Oh, that's not him anymore, his key got compromised, this is his new key: <whatever> -- and btw if your client supported nip-whatever it would have automatically migrated you as a follower to his new key. Use client-whatever or ask your dev to add support"
reply