Replying to Avatar armstrys

nostore for iOS signing and nsecbunker for a self-hosted authentication server. NsecBunker is more complicated, but super exciting.

I think I saw the same thread and it does seem logical that we add a key revocation kind into the spec. As of now there is no way for someone to aggressively inform their followers if their acct is compromised.
Avatar
Will Travel 2y ago

Is this the master key on a separate signing device, that creates child keys that can be revoked and changed. A good idea for power users!

Reply to this note

Please Login to reply.

Discussion

Avatar
armstrys 2y ago

Once nsecBunker is more widely accepted I won’t even put my primary key into extensions anymore. Nostore and Nos2x will have a throwaway nsecBunker admin key that I can use to control the bunker where the real keys live encrypted by a password. Then the admin key can be rotated at will and the real keys never leave the server - kind of like a hardware device.

So the nsecBunker key is kind of like a master key, but it can be tossed since it’s not tied to your identity