I just found this in your book:
"Key rotation is something that we have to figure out if Nostr is going to succeed in
the long term. There have been some proposals, but none of them have gained
enough traction to be implemented. Key rotation is an inherently difficult problem,
because you need to borrow the reputation of the old key in order to validate the
new key in such a way that an attacker wouldn't be able to do the same thing."
I wanted to let you know that Inkan implements a fully functional key rotation system. It's a prototype but it works. I've been using it for several months.
Please see below for screenshots, which contain many hints as to how it works. Happy to discuss, explain, address scepticism etc. ...
Inkan enables you to revoke and replace key pairs when your private key has been lost or stolen. You can also perform periodic key rotations preemptively. You can do all this in a decentralized manner.
That way Inkan gives you a permanent online identity that only you control, and that you can be confident you can keep over the long-term. For example 50 years.
Inkan is open for testing and comment. Let me know if you'd like to try it out.
View quoted note →
