I just had an idea. PGP encrypted data posted as a note to nostr as a way to create a geographically distributed backup of secured text. Good or bad idea, what does the hive mind think?
Nostr also seems like a great way to share public keys with some level of identity verification now that I'm thinking in that direction.
-----BEGIN PGP MESSAGE-----
hQIMAwv+2qjGGVjuAQ/6A6Nhg6Zr1yVgru8AchuvUzZ6pI/8j+9BM6aWzdU1olBN
A86egNVrzzpleGnmYzsBu23BrkRG27hDLWRsl9K6maDg54S3RDTyGqBju88706Rq
jwDhFlxig62963p7XofzUXuIDH8dCbxEg60dmMXgUgbJFHS57HYESunoaz5AycGY
TSN5gENlqp9r1GmZEGHqei+KDjbPjXJbFoW1mn/KuLLZgtrC5z6v4NSl5sfSbb5N
UxsRN18oFkiFoqgixsC8hn/F/FyS2BKbA9yA29yXMhOTswNhVv191hA9nKS06b+R
xzA7YXOsD/uXBs4YVeVFOQmPcQYRZRL74AsQIuNj97a5mtOVWzrE+BPYN7tJrMBc
/DkUgIDPTIUM58eWmxWPy2l7Real/xvxPi3w4QNU3mivJinAX0us3bWDT2kN5pIt
PJ8bVf1Sp36PuydC3/3C17s3YlVQ1Ni8s9ws0eSSGBKLQgbCzQirvSEcA3pmK/xp
am+jGId8FaAmySK1wwvtO+hCPm4/hwlNhJXoMeSiaP0OmIFq0VlSZMuZulJxEUsA
wqqHCmFgEb7PrwfYICuyBBleiWahquA459XCxojJp/7F4p978aIIVv5D9RvVmPTW
8EtMETBHbaeanXK9BYuGuKLImu4WWz5P5jgrgpPUIC6qp8JHwE5uEX22hAo78BKF
AYwDJnTmavRRGdIBDACKZ+WEN8RAUq5LJt6vLyO1ub0JZKNyAUWeicUcGuHht8AN
LrqYJskQnIEQQjvcPYZXw0ssRa775/uD1JZFcwH/sLJBsgsmiErWRyYWEfeOBlxo
DZ8nALOyVvWyaqDXS023h2ady8UQnMhcNIfLFmtZi2XE9tDOfpSG6hteSwMo04cm
WkwsNYY01WgMG11HxL06rQ7J+Zvyen/jZ0HUVB08rKhbxvzSnMo6RLeV24Fa7KBO
BWq2XTgWC/PAEVQW+z2ifZ7OC+Pt5wgHyEVjG7O+7KowY/p79WLgNf1KF5p7lKm1
rPWeN8s0xUz1Hi2cq2U19FLr0/C48lqweictqXHRBApdec93lo+IYKalyGDcg6SE
spnjD+PNn6iOttlUBkXR22/lzzR6wFQmLZoj974tmelYZQ0kmw5uZTzdNIacA6oF
cb3263l2QLs+O5yPCj2vWRSlItndfciXDa4NUlD22xaW59AS9hZx2yfH2/3bABIw
gRswuYKckGCTTKirolDSYwHopVyizJYtyFYAfzW+3t415fXuqyTP3h13DcMHZdmd
a1ekH9GTnemlnV0yhmQaI9Vx/bAh3RIy4q6QzPMPKlebqAIfaJoMUlsE2W+nul+O
07NP2+aLH/nx3uXk+uOEdYU2Vg==
=YIXC
-----END PGP MESSAGE-----
Wouldn't note to self require access to nsec to recover? Broadcast note requires only nip05, priv key, and any password on the key.
I'm thinking of this as a potential disaster recovery tool. Or as a way to get data past a border check in an escaping a warzone type scenario. So you would want to minimize required items to access data.
You can access but need nsec to decrypt. You can have mnemonic for nsec…
I hadn't thought much about how nostr actually works and I think I was misunderstanding. Are you saying just note to self and trust the nostr encryption? Then only nsec is required to decrypt.
How good is that encryption? I don't see it after 30 seconds poking around on the site.
It’s good but comes with it more attack vectors, mainly with private key leak errors on users/clients side and metadata… See https://github.com/nostr-protocol/nips/blob/master/04.md
Why use PGP instead of sending the note as a DM, and use the recipient nsec?
From the nip #[4] posted below...
This standard does not go anywhere near what is considered the state-of-the-art in encrypted communication between peers, and it leaks metadata in the events, therefore it must not be used for anything you really need to keep secret, and only with relays that use AUTH to restrict who can fetch your kind:4 events.
So that could be good enough. How secret do you need the data and for how long?
