Nostr Web Client

Random dumb midnight thought: what if nsec was disposable and was merely used as a key in combination with some other authentication method to your digital identity?

Meaning, a leaked nsec would not be that useful without the other part(s).

Nostr multisig

kidwarp 2y ago

Should we not just be deriving disposable nsec/npub from a Bitcoin Priv key/pub key pair?

Reply to this note

Please Login to reply.

Discussion

HoloKat 2y ago

That would lock out anyone without bitcoin no?

kidwarp 2y ago

Do you have to make a transaction to derive a nsec/npub from priv key/pub key?

HoloKat 2y ago

Probably not

kidwarp 2y ago

So in theory we could/should be deriving Nostr keys from Bitcoin keys & then adding multisig to nostr keys?

HoloKat 2y ago

And if you are not in bitcoin?

kidwarp 2y ago

Always the biggest problem.

Brunswick 2y ago

that's what I'm suggesting above, but you wouldn't want to use your actual bitcoin keys because the use-case is a little different for bitcoin. You also wouldn't want to leak your bitcoin xpub by publishing it to the world, and if someone steals one of your private signing keys from nostr they would also have access to whatever UXTOs are behind that address.

kidwarp 2y ago

Interesting