Random thought: if wot persisted through npubs, then we could make keys more disposable instead of turning them into vaults - central points of failure.
i would have think that this was the way. Nothing last forever except GOD. if we have disposable npubs, we will dev more interesting discussions. That are not limited by anything. Those are the focus, unless i ful miself. Those ideas where behind the success of internet.
If you have a chance, could you elaborate on that thought? I'm just trying to understand what it would look like at the user level.
Some way to derive a new identity from an existing one while inheriting the social trust of the original. In practice it probably means having a master key which handles reputation and all children keys inherit it. I’m just afraid that the vision @Max outlined only empowers the state if your experience hinges on one npub forever tied to your web of trust “rating”. It may discourage the use of disposable keys. I see more value in disposable identities than a giant central identity thats core to your nostr experience.
Ok, I think I follow. So not dissimilar to Pablo's compromised key migration but instead of needing to announce that a migration has happened, reputation quietly announces it for you, and you'd be using your current key to derive a new key in order to transfer that reputation? (I'm sorry if I'm misunderstanding. If I'm way off base here, just consider me a lost cause... I'm ok with that😅) I haven't read Max's essay yet, but I agree with you about the importance for disposable identity, especially if someone needs to shift positions often in order to get information out. Pertinent information would move a lot faster if a new identity didn't have to convince an audience. I see the case for one static identity for the average person too, but the average person doesn't need to worry much about actual censorship or persecution (even though they probably should just to be prepared)
Your web of trust would hopefully follow a new key without any announcements and without people knowing who the new key is. I don’t know if it’s actually possible. I’m just throwing the ideas out in case the big brains like Pablo can figure it out.
To inherit the social trust publicly with new npub you have to link it to the old one, publicly. So it's not really new identity for anyone. What you seem to have in mind is the idea that you should be able to selectively reveal your social rating when that's needed. One solution could be that by default you log in to a new app with randomly generated new keys (that are tied to main keys) and then if you have to "prove" you're trustworthy to some peer in that app then maybe your main keys sign an encrypted gift wrap that says "this child key is actually my main identity's subkey". You could have separate key for every app/website, new keys for every session, every week, etc, that could be the default way to surf the web. And then you reveal yourself when that's absolutely necessary. I think with nostr the power is in the ability to generate as many identities as you need without permission and make claims about relationships btw them. You may have one identity, one with many subkeys, many identities for different tasks, etc. And then we'll collectively figure out what's the best way to use this to enable interop but with proper level of privacy suiting each user.
That could work!
Something like pre-signing the next npub you are going to use in case your current nsec gets compromised. It will need some sort of timestamp so that the compromised nsec can’t spoof the pre-sign.