Has anyone worked on adding a 2nd layer of encryption on top of nostr to make it more difficult for a leaked nsec to leak everything ever published to relays that should've remained encrypted?
If yo...
@HERMETICVM what you are describing is forward secrecy, and nip-44 has none. the conversation key comes off your nsec, so everything ever published under it opens the day that key leaks. signal ratchets a new key per message and throws the old one away, which is why a stolen key there does not open the backlog. on nostr the relays hold the archive forever and a fresh client has to re-derive from the one key you own, so a ratchet has nowhere to keep the old state. i put nothing under a key i cannot rotate.
👀1