Replying to Avatar Silberengel

From 3d450733917dafd6bfc6f2b1fc7aa32f09efec6d Mon Sep 17 00:00:00 2001

Subject: [PATCH 0/1] Burning an npub

The npub+nsec combination brings the advantage that no user can have their passkey stolen and end up "locked out" of their own profile or app accounts by the thief changing their passkey. This is a securtiy advancement. However, the problem remains that the passkey (nsec) could be stolen or be given to a bad actor, and then the user must helplessly "share" the passkey with them. Both owner and thief can continue to sign events using this passkey. For this reason, I suggest we give users the possibility to burn an npub, by issuing a final event describing the npub as "retired".
Avatar
Silberengel 1y ago

I've submitted a patch to the event deletion NIP (09.md), adding the possibility to burn or retire an npub, rather than merely emptying it of events through deletion.

You can see the proposal and comment on it by opening the note below or by clicking https://gitworkshop.dev/repo/nips/proposal/23791a60b65c898b2eaa500323ef918e0c9d61b6a6dc16d7da42a3cc935075d7

nostr:nevent1qqszx7g6vzm9ezvt9649qqera7gcuryavxm2dhqk6ldy9g7vjdg8t4cpp4mhxue69uhkummn9ekx7mqzyr7jprhgeregx7q2j4fgjmjgy0xfm34l63pqvwyf2acsd9q0mynuzyshtlf

Reply to this note

Please Login to reply.

Discussion

Avatar
Laeserin 1y ago

nostr:npub1wtuh24gpuxjyvnmjwlvxzg8k0elhasagfmmgz0x8vp4ltcy8ples54e7js

nostr:nevent1qvzqqqqqqypzplfq3m5v3u5r0q9f255fdeyz8nyac6lagssx8zy4wugxjs8ajf7pqqs98ftma69a80mz250dy63t6shaf0c7sc3z4tspya77cv5raz02pjsqpu6dy

Avatar
Laeserin 1y ago

nostr:nprofile1qy88wumn8ghj7mn0wvhxcmmv9uq3xamnwvaz7tmjv4kxz7fwvcmh5tnfduhsz9thwden5te0wfjkccte9ejxzmt4wvhxjme0qqs2qzx779ted7af5rt04vzw3l2hpzfgtk0a2pw6t2plaz4d2734vngr4qq0c nostr:nprofile1qyt8wumn8ghj7etyv4hzumn0wd68ytnvv9hxgtcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhszythwden5te0xy6rqtnxxaazu6t09uqzp6vf4fhqzd749fqsanvf4evl0tdlkz77e9uxhyvpcdc8j495e7nf6g5j9m nostr:nprofile1qyv8wumn8ghj7enfd36x2u3wdehhxarj9emkjmn99uq3kamnwvaz7tmjv4kxz7fwdehhxarjwpkx2cnn9e3k7mf0qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qpqf6ugxyxkknket3kkdgu4k0fu74vmshawermkj8d06sz6jts9t4ksuss6cl nostr:nprofile1qydhwumn8ghj7argv4nx7un9wd6zumn0wd68yvfwvdhk6tcprpmhxue69uhkv6tvw3jhytnwdaehgu3wwa5kuef0qyfhwumn8ghj7ur4wfcxcetsv9njuetn9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcpz9mhxue69uhkummnw3ezuamfdejj7qghwaehxw309aex2mrp0yhxummnw3ezucnpdejz7qpqcpstx8lzhwctunfe80rugz5qsj9ztw8surec9j6mf8phha68dj6qm6a4gv nostr:nprofile1qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq36amnwvaz7tmwdaehgu3wd46hg6tw09mkzmrvv46zucm0d5hszyrhwden5te0dehhxarj9ekk7mf0qqs9uh7pgdxf9z7dewn0sqv9n4frsdqsjv53nq8axm3nkaqk8y745tqcma0ye nostr:nprofile1qyd8wumn8ghj7mn0wd68ytn5dpjhxctdv43kzapwd9hj7qgkwaehxw309anhyet9deek7atv9eehqctrv5hszxmhwden5te0w35x2en0wfjhxapwdehhxarjxyhxxmmd9uqzquqjyy5zww7uq7hehemjt7juf0q0c9rgv6lv8r2yxcxuf0rvcx9eu7kkvw nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgmwaehxw309a6xsetxdaex2um59ehx7um5wgcjucm0d5hszymhwden5te0wp6hyurvv4cxzeewv4ej7qghwaehxw309aex2mrp0yhxummnw3ezucnpdejz7qg3waehxw309ahx7um5wgh8w6twv5hszxrhwden5te0ve5kcar9wghxummnw3ezuamfdejj7qpqecdlntvjzexlyfale2egzvvncc8tgqsaxkl5hw7xlgjv2cxs705s4jqg62 nostr:nprofile1qydhwumn8ghj7un9d3shjtnhv4ehgetjde38gcewvdhk6tcprfmhxue69uhhq7tjv9kkjepwve5kzar2v9nzucm0d5hsz9rhwden5te0wfjkcctev93xcefwdaexwtcpzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtcqyqalp33lewf5vdq847t6te0wvnags0gs0mu72kz8938tn24wlfze6p66ygk nostr:nprofile1qyw8wumn8ghj76r0v3kxymmy9e3k7unpvdkx2tn5dahkcue0qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgnwaehxw309ac82unsd3jhqct89ejhxtcpzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtcqyztuwzjyxe4x2dwpgken87tna2rdlhpd02va5cvvgrrywpddnr3jy649ucs nostr:nprofile1qyt8wumn8ghj76rfwd6zumn0wd68ytnvv9hxgtcpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhszythwden5te0dehhxarj9ekxzmny9uqzq5455pmtewaacws6a73hxkqkea6fjwcm3keq9vqu3q7930nl4k9alga6my nostr:nprofile1qyf8wumn8ghj7u3wd4kx26m49ejx2a30qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgkwaehxw309ajkgetw9ehx7um5wghxcctwvshsqgzvsqp90fvg4q5yn5zfs97zhk4dnp9jtfz6m8md44nwglfmgl3m9uxavhtk nostr:nprofile1qyvhwumn8ghj7un9d3shjtnndehhyapwwdhkx6tpdshszythwden5te0dehhxarj9emkjmn99uq3vamnwvaz7tmsw4e8qmr9wfjkccte9e3k7mf0qqsr7acdvhf6we9fch94qwhpy0nza36e3tgrtkpku25ppuu80f69kfqze3spx nostr:nprofile1qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3uamnwvaz7tmwdaehgu3dwp6kytnhv4kxcmmjv3jhytnwv46z7qg4waehxw309aex2mrp0yhxgctdw4eju6t09uqzqp5fmavy02xnxa5f9k3fvgkhcr7urmcetr6tc3r3myykd2s7e20jv5hgvt nostr:nprofile1qyfhwumn8ghj7ur4wfcxcetsv9njuetn9uq3samnwvaz7tmxd9k8getj9ehx7um5wgh8w6twv5hsz9mhwden5te0wfjkccte9ehx7um5wghxyctwvshsz9rhwden5te0wfjkcctev93xcefwdaexwtcpz9mhxue69uhkummnw3ezuamfdejj7qgmwaehxw309a6xsetxdaex2um59ehx7um5wgcjucm0d5hsqgppksv3qtdgls96jpyy4mynf064k74u7a0wmvu3yn5dwhjfraq6tcrq4yxa nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyv9kh2uewd9hj7qgawaehxw309ahx7um5wghx6at5d9h8jampd3kx2apwvdhk6tcpzamhxue69uhhyetvv9ujumn0wd68ytnzv9hxgtcqyz55xnhpvhksrv5xhm8uyac779c96dfh6pgm8peg3zvvcqx4ezzmu7c60ug nostr:nprofile1qyfhwumn8ghj7ur4wfcxcetsv9njuetn9uq3zamnwvaz7tmwdaehgu3wwa5kuef0qy28wumn8ghj7un9d3shjctzd3jjummjvuhsz9mhwden5te0wfjkccte9ehx7um5wghxyctwvshszxrhwden5te0ve5kcar9wghxummnw3ezuamfdejj7qg4waehxw309aex2mrp0yhxgctdw4eju6t09uqzp75cf0tahv5z7plpdeaws7ex52nmnwgtwfr2g3m37r844evqrr6j32zrnq nostr:nprofile1qyghwumn8ghj7mn0wd68ytnhd9hx2tcppemhxue69uhkummn9ekx7mp0qyvhwumn8ghj7un9d3shjtnddakk7um5wgh8q6twdvhsqgpxdq27pjfppharynrvhg6h8v2taeya5ssf49zkl9yyu5gxe4qg552nk2jc nostr:nprofile1qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3xamnwvaz7tmsw4e8qmr9wpskwtn9wvhszythwden5te0dehhxarj9emkjmn99uqzqqm9x092su3hd9rdfe8aafxp5pzpak3cegkem9qhhvmqqm96406cj5pczw nostr:nprofile1qyt8wumn8ghj7cn9wehjumn0wd68yvfwvdhk6tcppemhxue69uhkummn9ekx7mp0qy28wumn8ghj7un9d3shjctzd3jjummjvuhsqgrucv52prwm9t7ln7d7w7l07nyrfz0lj7tjrqnav299gtej5frupcezj8ja nostr:nprofile1qywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3xamnwvaz7tmsw4e8qmr9wpskwtn9wvhszythwden5te0dehhxarj9emkjmn99uqzphm8lxn7gyf9w3wtu7k0hhxsx6ghsrry8hmm44c0t5ss3uk5lssqnml86a

...and anyone else interested in user management. 😊

Avatar
Laeserin 1y ago

Feeling cute.

Might start a GitWorkshop hellthread. 🤭

Avatar
CraigTheSpaceBum 1y ago

It would be like they never existed :o

Avatar
Josua Schmid 1y ago

I like the idea. A burned npub is like a lost npub. Compromiser can burn it. Fine, as long as there cannot be a migration event together with the deletion. I don‘t see a solution for migrations in nostr because time is not absolute. Referencing other events can only give relative time.

Avatar
Silberengel 1y ago

They were discussing (in a separate dev hellthread) that we could add a layer of validation to a migration by using WoT and NIP-05, or even a linked key.

nostr:nevent1qvzqqqqqqypzphtxf40yq9jr82xdd8cqtts5szqyx5tcndvaukhsvfmduetr85ceqqsy4nget7dvsdlh64mjm46px9xm88wz64qv2k6t2sfxzaf7djtnfrgp9rp8l