unfortunate default
Discussion
That makes me sad. 😞
once you get used to identifying as a pubkey you can't go back to being a KYC
It didn't even occur to me that the other protocols don't use keys. That is wild.
Mood
yeah, keys are so much stronger security than all the KYC elements together...
nostr:npub1xtscya34g58tk0z605fvr788k263gsu6cy9x0mhnm87echrgufzsevkk5s was pondering the question about enabling finding friends on nostr through phone numbers, and eventually realised it wasn't enough entropy to be secure
you can take phone number, name, birthday, address, bank account number, and still not even have 1/1^128 th of the security of a 256 bit elliptic curve key
Yeah. You could just go through the PayPal or IRS database, hash everything, and search.
I'd love to learn more about #nostr keys encryption.
well, it's a pretty dense subject, but the keys (pair - secret and public keys) are mainly used to prove identity (authentication) using signatures, which are codes that give a "true" value when compared with the public key corresponding to a user's secret key
but you can use one secret and one public, from two separate key pairs - eg my secret and your public, to generate a secret that the opposite also generates, ie, your secret, and my public key, this is called Elliptic Curve Diffie Hellman, and is used in DMs and is used by TLS/SSL for HTTPS
that's the short version of how they work
the part about security has to do with bits... they say that a 256 bit encryption secret (like the one you can make with ECDH) has ~128 bits of security because you have to try 2^128 numbers, on average, to find that secret by brute force
256 bits, or 2^256 - even with the Webb telescope's new view of how much bigger the universe is, is still more than the number of atoms in the known universe
it's basically impossible even with all the computers in the world trying options, to either break the 256 bit encryption key or steal someone's secret key, in a thousand years at current rates of increase in capacity
It is a fascinating subject.
Why are you constantly supporting shits?