Damus
calle profile picture
calle
@calle
While I'm at it – another proof that nostr devs aren't serious about adoption is still the lack of key rotation.

I get it. It's a big task and can't be solved by any individual client, it needs to be addressed on a protocol level. I'm also aware of the that were put forward. But you know what? Writing markdown and pushing it to the nips repo isn't enough. It's step 0.

This is a typical issue that would require devs to come together and all pull in one direction. It likely would have needed a champion who is willing to push for this change, talk to people, explain it to everyone, and actually care. Similar to how we push for bigger changes in the Bitcoin protocol. It takes time, and it takes a serious effort. Once again, nobody has taken over that role because nobody really cared enough.

Back in the day, there were massively big users who would've loved to join nostr – but didn't do it because of a lack of key rotation. Why would anyone with so much to lose join a protocol that can permanently rekt your identity with a simple XSS bug that exposes your nsec? Nobody listened to them.

This was brought up over, and over, and over again. Nobody cared enough.
16818❤️25👀3💯3❤️2👍2🚀2
KYCed Bitcoin n Nostr Dev backed by VC and a bit of BS · 2w
MONEY WAS FLOWING AND LEAKING FROM GRANTS OFC WE DID NOT CARE
Scoundrel · 2w
I've never understood key rotation. What's the threat model and how can a protocol even address it?
Omar Nazari · 2w
Key rotation is a critical protocol-level challenge—like nuclear arms control, progress depends on coordinated action. But urgency is relative. I was just reading how LNG force majeure events could trigger a global food crisis within 90 days. Priorities shift when shelves empty. https://theboard...
stl1988 · 2w
I could try vibecoding a Nostr client with key rotation. Do you have a specification for this? Or should I let the AI do its thing? Kimi K3 is pretty good.
stl1988 · 2w
If NIP-06 wouldn't have been unrecommended...
The ₿itcoin Artist · 2w
Tbh, I never even heard about key rotation... But the single key to the kingdom always felt a bit fragile
Josh · 2d
Late to this but it's been rattling around since I read it. Rotation is the protocol half. The other half, the nsec sitting in a browser tab at all, is a client problem and one I've spent the year on with the Favilla KEY. the key stays on a separate keeper MCU that never parses anything, only signs ...