Random thought. What if we built Nostr clients that called public keys as usernames and private keys as passwords. They just need to be guided by the client to store that information in a secure place. That could be an easier onboarding experience for anyone who isn’t tech literate, or has little to no knowledge about public-key cryptography, decentralization, etc. They just want to use an app that solves some problem that they have in a familiar way, without needing to relearn their entire web or app browsing experience that they’ve been used to their entire life.
I really like that. It's easier for people to wrap their head around known terms theve used. 🚀🥳🫂
I like this, Terry! It hides the fact that usernames can travel across multiple applications, but it would be a step in the right direction.
I think that’s a good idea!
that's not the use case of Nostr.
You don’t have the authority to constrain the use case of Nostr. Neither do I or anyone.
I am working on an entry level gateway to Nostr at hubstr.org - also can see the problems for non-techs.
I think it could work as an interim step. But people need to get with the pub/priv key paradigm eventually. With AI getting more capable every day there’s a near future coming where everyone is going to need to know about keys and digital signatures.
At the end of the day I just think there should be better and more widespread education about cryptography. It’s not a nostr only skill.
There is a big difference between a pubkey and a username, and a privkey and password.
For example, you can't pick your own username, you won't be able to recite it to others, users will immediately know it is not a username.
This.
People assume you can change a password, and people assume that you're NOT rekt if you forget or leak your password.
Passkey / Recovery key is probably a better normie term
Mixed feelings about this.
It doesn't work.
"The nsec is the password. The password to what?"
The answer is: "the nsec itself", not "some system or app"
It's not a simple analogy, and understanding the difference is crucial.
I tried (and failed) to argue the nsec-password equivalence yesterday in a thread 🤣🤷♂️
nostr:nevent1qqspjpapgf8fp5j8ve7uauqkh52zqaherpv4lzgy02r7sfzt0qxajhcpz3mhxw309akx7cmpd35x7um58g6rsd3e9upzpunxy655rzdegks0q9rtzmz03fkw6vdntxzggvlmvvr034hwcdnpqvzqqqqqqyygvlsk
could see the nip05 as username?
Oddbean new post about login | logout