Just need a tool that replays all of your posts with the new key. Ideally there would be a way to mark a contact as "revoked" so all future posts are ignored.
Discussion
I don't see why there couldn't be a "migrate note" that tells clients to replace a followed pubkey with a new one.
The revoke thing would be pretty easy, just send a note of some specific revoke-kind. If a client sees this note, ignore all future notes from that pubkey. Unfortunately it still might need relay support in the presence of the note deletion NIP. You wouldn't want attackers to be able to delete the revocation note.
we need to make sure that a user still has options if an imposter marks their account as revoked though, right?
I don’t see what you could do that the attacker couldn’t do after it’s revoked.
yeah nothing. just saying we shouldn't cut off an account from its followers after revocation, on the chance that revocation was not done by the user. but don't really have a better solution to offer atm...
I think ultimately you couldn't trust anything from the account after it's compromised, so you would have to convince people to follow your new account out of band somehow.
For me I had time to announce my new pubkey after my secret key leaked, it would have been nice if I could freeze the old account afterwards.
Could this be some kind of pregenerated revocation event which can be stored on paper or whatever and being broadcasted even if access to the private key is lost?
how is the current status?
still only the one private key one needs to defend for life cuz one cannot change it?
if compromised, one needs a whole new key -> also public key/ profile?
nostr:note1hjzdpyk6mpvpasnp7vzzhhuqp8mjde6kdrgvjzlyls8neuyas3zsdfcu6e
nostr:note1eme5m73s253xj3flsmgscz3rge82mp5wfyqz9yu98eku8xtrj06q67kh36
#asknostr