Yeah the encryption is what protects the raw share data from the transport infrastructure. Each key (Shamir share) is gift wrapped to the intended steward's private key. The invitation link dance when inviting stewards (which does use a horcrux url, but doesn't have to) is essentially setting up an authorized set of keys so when your app sees a recovery request it's easy to discard bad actors.
So Nostr is a peer to peer transport layer but it's also the identity layer. The nostr events only need to stay on the relay long enough for the stewards to fetch the latest ones, so in most cases just a few days. And yeah I think being able to choose your own server is a big deal for something you want to last a long time. If I had used p2panda or iroh or ssb instead of Nostr I would still need a store-and-forward server.
npub16z…l92l7
2026-09-09 17:09:24 UTC
in reply to nevent1q…2mcl
Author Public Key
npub16zsllwrkrwt5emz2805vhjewj6nsjrw0ge0latyrn2jv5gxf5k0q5l92l7Seen on
wss://nostr.lorentz.isPublished at
2026-09-09 17:09:24 UTCEvent JSON
{
"id": "fc43bcb15e576fafe6fd69fc7867c596cd1506c3969d4e6e5692784c8dcb5b4f",
"pubkey": "d0a1ffb8761b974cec4a3be8cbcb2e96a7090dcf465ffeac839aa4ca20c9a59e",
"created_at": 1788973764,
"kind": 1,
"tags": [
[
"e",
"00d1b9ce2f956b64742f0efd24dfd33c5f095a35bf7c5b2520e9567898415bf2",
"wss://pyramid.fiatjaf.com/",
"root",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
],
[
"e",
"a400d08cc136e354ccac8a38a721087fdd35f6e08038263960d006621a8a4a4e",
"wss://theforest.nostr1.com/",
"reply",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
],
[
"p",
"d0a1ffb8761b974cec4a3be8cbcb2e96a7090dcf465ffeac839aa4ca20c9a59e"
],
[
"p",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d",
"wss://pyramid.fiatjaf.com/"
]
],
"content": "Yeah the encryption is what protects the raw share data from the transport infrastructure. Each key (Shamir share) is gift wrapped to the intended steward's private key. The invitation link dance when inviting stewards (which does use a horcrux url, but doesn't have to) is essentially setting up an authorized set of keys so when your app sees a recovery request it's easy to discard bad actors.\n\nSo Nostr is a peer to peer transport layer but it's also the identity layer. The nostr events only need to stay on the relay long enough for the stewards to fetch the latest ones, so in most cases just a few days. And yeah I think being able to choose your own server is a big deal for something you want to last a long time. If I had used p2panda or iroh or ssb instead of Nostr I would still need a store-and-forward server.",
"sig": "113d259c6a3dec7f6a60082dc76c5dadb8fd4aeff439e382a3908ed6764bcb93fe3bb7ca85b47cf1399851710f57e1387247812359da1e2a8791b77fe0f71a6d"
}