Thanks. Yeah, I think FROST generally is the right approach, yet specifically for normies, I don't support incentives of associating a Nostr profile with the one from a centralized system (not like I'm anally against it, yet I personally don't currently accept this thing for my close normie contacts unless a strong enough argument changes my mind). Not even due to privacy and not just due to @alp's trend concerns on this, but because, in the norimes' non-techie minds, I believe this creates the false idea that Google = Nostr profile (no matter what we tell them). What a normie would do if Google suddenly became unavailable for them (due to their profile ban by Google or the entire company ban by government, which has partially happened in Russia already, btw)?—They will think they've lost (access to) their Nostr profile. Next, they will do something stupid out of stress in order to urgently contact their Nostr-only buddies (in practice, they will paste and possibly leak their raw nsec somewhere if they manage to access it). Maybe I'm biased; I'm curious what you think about it. > other protocols, like Simplex or Delta Especially for normies, I think at least implementations of all of them keep being problematic, in particular in terms of UX and censorship resistance; just the SimpleX alone in practice is currently centralized (easy to ban from whatever side, definitely not thousands of servers owned by independent entities), and there's no multi-device sync (also, device linking is unusable):

GitHub

Multi-device synchronization · Issue #444 · simplex-chat/simplex-chat

Hello I didn't find the way to easily switch from one device (eg PC) to another one (eg android), so I'm opening this issue to permit that. Thanks ...

Nostr is a great chance to fix it, yet I agree it's very hard 🖤 > that doesn't go on the bunker seems to be a good enough compromise You mean pasting the nsec/ncryptsec into a client as an exception for now? I strongly believe ordinary clients shouldn't be trusted to store the key; the protection is far from perfect (Ditto is just one example; this could be any native or web client or a proprietary browser or an extension that exploits a browser bug). Also showing to a normie that this practice is acceptable, just in one case, opens it for other scenarios: it's just like you can't teach a child that something is immoral unless you follow your own rule; they copy our actions, not what we think is right.