Agree. Private key management has to improve. But at least, if one key if breached, the entire dataset isn’t breached.

Ironically, the best way to solve the problem of massive data breaches is to have the data out in the open to begin with. Relays can do this job.

How you protect the data is to not view the data as being in a single container protected by a single key, but as millions and millions of little containers (events) signed and encrypted by keys that you don’t actually hold.

If there is a breach, it’s an issue contained to an individual holder, not and issue for the entire dataset, or for the broader society as a whole, who now has to deal with massive breaches on a daily basis.

In keeping with my earlier theme, #nostr turns the whole architecture and approach inside out. It will take some time for this to catch on (too much money to be made fighting the traditional cybersecurity fires), but we’ll get there.

#nostr #cybersecurity

Don't know. My inkling is that there will be an enterprise use case where counterparties need to interoperable and have common authoritative data but don't necessarily trust each other. To mitigate this risk they will set up their own relays.

I have no idea what the viable commercial models might be. Then again, nobody had a clue on how the internet would eventually play out (still playing out).

Right now I am focused on getting away from commercial platform capture. I now see how relays could specialize into long term storage relays and NIP44 be shored up to handle PQC.

For me, the mind blowing part is a different thinking model where the network is the app, storage, etc.

I am still coming to term with #nostr having a radically different architecture that requires a radically different thinking mode on how you build apps.

The latest radical insight is that the network becomes the database. Any database record you generate can be a #nostr event that is signed, relayed, but most importantly encrypted by you (NIP44).

This approach breaks the back on commercial platform capture and lock-in.

To date, commercial platforms have always had the play of providing free services to get you into their closed databases with database records about you. Then over time, those records (not controlled by you) lead to, in the words of Cory Doctorow, “enshittification” of everything about the service and the relationship with you. Also, massive breaches are just an event waiting to happen.

With #nostr, the traditional model is flipped on its head. Instead of feeding a commercial service to generate database records about you, you can generate and sign events that can be stored on any relay, or in the network as a whole.

So just like your nostr npub is no longer beholden to a commercial provider, your nostr events (database records) need no longer to be beholden as well.

I am not discounting the existing commercial platforms. I’m just saying there is now a whole other approach. New commercial models will be discovered eventually, but right now the imperative is to experiment with this radically new approach.

Special thanks to nostr:npub1l2vyh47mk2p0qlsku7hg0vn29faehy9hy34ygaclpn66ukqp3afqutajft who got me thinking this way.

With #nostr, the network is the app.

You know how a flat-earther feels when they finally realize the world is round? That’s how I felt when I realized with #nostr that data can be stored everywhere.

Ecash stored as a NIP44 encrypted event = SUPERPOWER

Drucker: Culture eats strategy

Nostr: Architecture eats government.

Idea for #nostr collectibles: npuppies

Karl Jung

https://x.com/TommiBooks/status/1809201835598659660?t=O_tTyLjGRK4zQoxGRPH8ng&s=19

Good point, but for simplicity I see them as one. Nostr identities have little value without the relays. I know this is semantics, but what I am looking for is a simple way to communicate to normies.

With apologies to those who think #nip04 should be unrecommended.

The #nostr core requirement for 1:♾️ capability is sovereignty. For existing capabilities, the sovereignty requirement was never really understood or swept under the rug for more immediate opportunities. My belief is that the sovereignty requirement is equally crucial for an individual as it is for a nation state or any organization for that matter. With #nostr, I believe we’ve landed on an architecture that scales to infinite degree for anyone/anything that wishes to be sovereign.

#nostr is digital by other means.

#nostr is digital by other means.

Yes, however, if you are planning to offer a commercial-grade service, you’ll likely run your own relay. I think when organizations catch onto #nostr, they will set up their own relays. Only a matter of time.

#bitcoin is the global state.

#nostr is the global store.

With #nostr, everyone is their own superuser. This model is radically different than the platform fortress models that we have today, where every (usually commercial) platform ends up being a feudal system of absolute domination and rent extraction.

#nostr flips the old modesl on their head because every npub is its own root of authority and all npub data are signed events, authoritative (public and private with nip44), and held by the network (i.e. relays). This is a radically different architecture than exists with ‘Web 2.0’ applications. With #nostr, there is no need to store data in the ‘cloud’ (I.e., somebody else’s computer ), just put it on a relay.

No one stops this train…