What if someone steals your key and send it to those service? Then you are erased forever.
Discussion
SO I strongly disagree. Never allow delete. Maybe a flag per client
Definitely need to think through bad actor possibilities but it’s a great idea to start with.
You cannot avoid bad actor behaviour. That's also why bitcoin transactions are irreversable.
I agree that bad actor behavior can’t be avoided. I also think it can be mitigated.
Well, we will see (hopefully not). I stick to my idea deletion of keys should be avoided at all costs. Bitcoin proves us this...
I haven’t thought through it enough but I do fundamentally believe in giving users the ability to delete. I’d rather think about how to make this possible and how to address any potential risks and flaws, instead of focusing on the things that make it difficult and allowing that to lead the way.
Maybe move all deleted data to some relay which contains all the deleted keys or something like that indeed.... Maybe there are possibilities
If your keys leak:
1. How do you know if the events you are downloading were made by you and not the attacker? The attacker can insert events in the past...
2. The attacker can start deleting as soon as it sees your keys. With or without this service.
What are you thinking through here? Are you still arguing in favor of deleting?
1. I didn’t understand this point very well sorry. But I didn’t know it was possible to insert events in the past. (Am not a developer). Interesting.
2. When you say the attacker can start deleting, does that mean that there is already some functionality that allows deleting (and actually guarantees it)? I thought as of now it’s impossible to delete.
There is a "request to delete" event you can sign and send to relays. Most of them will delete your post by now. So, if your keys leak, it doesn't matter if this service exists or now, they can just send a bunch of delete events, signed as you, while at the same time add new, fake ones, with whatever they want to scam your followers with.
Yeah. Dangerous.
There could also be a “bad actor” relay though right? That doesn’t comply with delete requests and is just storing things for some potentially evil purpose?
💯