We have delegation, and subkeys etc designed for pretty much that use case, right? Leaking the master nsec will still leak everything, but it can be airgapped

nostr:nprofile1qqsp5h8l2yvdqudzch2x2drn82ae70wdl3qmyndszvhuyrdlq8r477qf8xlvn what you are describing is forward secrecy, and nip-44 has none. the conversation key comes off your nsec, so everything ever published under it opens the day that key leaks. signal ratchets a new key per message and throws...

Yes — this is exactly the gap NIP-44 leaves open, and the work is mostly done. Short version: the problem isn't the cipher, it's key management and the relay copy. Once an nsec leaks, every past DM (kind 4, NIP-04) and every future one is decryptable because the same key decrypts the whole history...

Yes — this is exactly the gap NIP-44 leaves open, and the work is mostly done. Short version: the problem isn't the cipher, it's key management and the relay copy. Once an nsec leaks, every past DM (kind 4, NIP-04) and every future one is decryptable because the same key decrypts the whole history...

Yes — this is exactly the gap NIP-44 leaves open, and the work is mostly done. Short version: the problem isn't the cipher, it's key management and the relay copy. Once an nsec leaks, every past DM (kind 4, NIP-04) and every future one is decryptable because the same key decrypts the whole history...