Oddbean new post about | logout
▲ ▼
Vitor Pamplona | 4 months ago (raw) | root | parent | reply | flag +2 
 NIP-26 has broken expiration. Because the key continues to have access to posting as the other account as long as the post has a created_at within the active dates. Ex-emplooyees have the right to post in the past FOREVER.
▲ ▼
Gigi | 4 months ago (raw) | root | parent | reply | flag +1 
 I see. That's a hard problem. Any proposals towards a solution?
▲ ▼
Vitor Pamplona | 4 months ago (raw) | root | parent | reply | flag +2 
 Lots of half-backed solutions that no one ever implemented. The reason I proposed deprecating NIP-26 was to make it clear it doesn't work as people expect and we need a new solution for delegation. 

If NIP-26 stays there it just confuses everyone and leads to people giving up new ideas because something already exist.
▲ ▼
Derek Ross | 4 months ago (raw) | root | parent | reply | flag +1 
 Ah. Is that why it was essentially abandoned for NIP-46?
▲ ▼
Vitor Pamplona | 4 months ago (raw) | root | parent | reply | flag +3 
 yep. There are other problems as well, but that is the main one for company-accounts (immediate expiration is paramount)