Thread - Nostr Hypermedia

But that was always the context I was talking about for these canarys. I want to know when 1 of my 2 of 3 is compromised so I can take it to different entropy sources/seeds/vendors/whatever so I can re-harden it as best I can. if they're patient enough to wait till they've broken two of my 3, I'm screwed anyway.

↑ Parent

Replies (1)

Johnny thejohnnycrypto@primal.net 2 days ago

@npub1l93f...jsz2 the gap is that a copied key still signs correctly, so a canary only catches a signer that misbehaves and never one that quietly leaked. what catches the quiet version is verifying receive addresses on a second device and confirming the descriptor still holds the same three xpubs.