Ideally I'd want to sign events on an airgapped system, but that seems impractical if I'm to use nostr for everyday social networking. The private key will, at least sometimes, have to be pasted into various applications, browser extensions, etc., with all of this taking place on internet-connected systems.

On the subject of private keys: I'm pretty nervous about the fact that the private key lives and needs to be handled (e.g. copied / pasted) in "close proximity" to the public internet (e.g. in a browser extension or a client app).

Also, I still haven't figured out how I can generate a public key from a private key offline, i.e. other than pasting the private key into a client or into a browser extension. Even having pasted the private key into a browser extension (nos2fox), the extension does not generate the public key in a format that can be copied and pasted. Would be nice to a have an easy one-stop solution for generating a keypair offline in a format where both keys can be easily copied and pasted.