hey David. every existing proposal has the same flaw: if an attacker has your nsec, they can publish the same migration event you can. you can't prove who did it.
i am proposing below a scheme that fixes this using a hash commitment published on day one, a sha256 of a passphrase that lives only in your head (a password or something).
attacker can't rotate without knowing it. if they try, the fraudulent rotation is cryptographically distinguishable from a legitimate one.
key theft becomes detectable, not just disruptive.
draft NIP: https://github.com/nostr-protocol/nips/issues/2237
check it out, and let me know your thoughts!
#nostrbuild #keyrotation #cryptography
leon
npub1gx…e5zfk
2026-02-24 19:10:55 UTC
in reply to naddr1qp…xcp0
Author Public Key
npub1gxdhmu9swqduwhr6zptjy4ya693zp3ql28nemy4hd97kuufyrqdqwe5zfkSeen on
wss://nos.lolPublished at
2026-02-24 19:10:55 UTCEvent JSON
{
"id": "d61514d94254d9ca66835e3156fffa52b4c494f874067edbb91cae99af55b839",
"pubkey": "419b7df0b0701bc75c7a105722549dd16220c41f51e79d92b7697d6e7124181a",
"created_at": 1771960255,
"kind": 1,
"tags": [
[
"t",
"nostrbuild"
],
[
"t",
"keyrotation"
],
[
"t",
"cryptography"
],
[
"a",
"30023:e5272de914bd301755c439b88e6959a43c9d2664831f093c51e9c799a16a102f:key-rotation-and-web-of-trust-the-simplest-possible-solution-to-a-pressing-problem",
"",
"root"
],
[
"p",
"e5272de914bd301755c439b88e6959a43c9d2664831f093c51e9c799a16a102f"
],
[
"r",
"wss://relay.primal.net/"
]
],
"content": "hey David. every existing proposal has the same flaw: if an attacker has your nsec, they can publish the same migration event you can. you can't prove who did it.\n\ni am proposing below a scheme that fixes this using a hash commitment published on day one, a sha256 of a passphrase that lives only in your head (a password or something). \n\nattacker can't rotate without knowing it. if they try, the fraudulent rotation is cryptographically distinguishable from a legitimate one.\n\nkey theft becomes detectable, not just disruptive.\n\ndraft NIP: https://github.com/nostr-protocol/nips/issues/2237\n\ncheck it out, and let me know your thoughts!\n\n#nostrbuild #keyrotation #cryptography",
"sig": "f5248c3f16438af9884a90105144689a29fca6239d3bf3c56fef642aed1994672a10f08011af44fa9fd19e5b12f51e8c88a9b0267f45408026156f29b0a2e12c"
}