Oddbean

I think Primal should have two modes to join: 1- Self sovereign way: The user receive the nsec and npub and have privacy. 2- With email and password: The user doesn't have access of nsec. Have all disadvantages of a centralized service. Obs. I think would be more easier to people that doesn't care yet about decentralization, to join nostr.

I can see that npub and nsec might not be necessary for users who don't want to deal with it, but they should still be generated so that the account is secure from people who try to clone the account on other devices with the username/password.

Getting people used to the idea of a public and private key is a big step towards getting them more comfortable with Bitcoin and sats. I don't think we should ignore the lesson and make things too easy.

I agree. But after installing Primal on my phone, getting the public and private key to be able to log into the same account in my browser was super easy, just copy/paste into a secure location, copy paste into the browser login, and I was off and running. I think it would have been almost as easy if I wasn't already familiar with public/private keys, it would have just taken a few more minutes of research and a brave step into the unknown to expand my comfort zone. Which is what I did way back in 2017 when I started down this path. Eventually, adoption will come as more people get comfortable with how it works, I really don't think we need to massively adjust how it works if it introduces holes in security.

Believe me, many old people and youngs too doesn't care about these things, they just want to use something in the same way they always did. But I agree that with centralized mode with email and password, the user should have access to nsec to be able to login in other apps to, if they want.