Replying to Avatar HoloKat

He’s not wrong. Leaking your nsec is irreversible and password and accounts can be recovered.

We could fix this but it seems it would require cooperation from everyone. nostr:note1k3e40jm5negkzz9z3eezn5mt0u2z0ufddw65t2t6pk8zlmy6tfzsuewzl2
Avatar
VOLKER - Voice Of Logic Knowledge Experience & Responsibility 10mo ago

Wouldn't it be relatively easy to define a standard BIP-39 derivation path for a top level nostr chain code, then derive nostr privkeys from that? And in case of breach, you can publish that chain code's xpub along with the new privkey for key rotation?

I'm not a cryptographer, but it sound like it wouldn't even be hard (maybe *because* I'm not a cryptographer 🤭)

Reply to this note

Please Login to reply.

Discussion

Avatar
HoloKat 10mo ago

Yes. You could generate a child key and a recovery key. I’m no cryptography either but it seems logical enough.