NIP-82 seems like a big deal: "The idea is to decentralize medical information. Today medical data is either in the hands of the government or in the hands of gigantic private enterprises. Patients don't have any access, or control, over their data. That has to change. And Nostr can make it happen.” https://github.com/nostr-protocol/nips/pull/357
After Finance & Communication, Now it's health. Very great initiative started by Vitor Vitor Pamplona #[0]
This seems like an absolutely dangerous idea without a proper key management/rotation scheme.
Nostr isn't about Ah I give up
I mean It is important for everyone to have full control over their medical information, rather than having it controlled by the government & unreachable institution. This is undoubtedly a game changer, as it opens up possibilities for building sophisticated systems due to its decentralized nature. I can imagine the potential of this mechanism, and its benefits in providing individuals with control over their personal data. I mean who knows this better than you.
As Far as why specially women: "Women also need health care more and access the health care system more than do men. While part of this is due to their reproductive and sexual health needs, they also have more chronic non-reproductive health issues such as cardiovascular disease, cancer, mental illness, diabetes and osteoporosis." Details: https://en.wikipedia.org/wiki/Women%27s_health#%3A%7E%3Atext%3DWomen_also_need_health_care%2Cmental_illness%2C_diabetes_and_osteoporosis.?wprov=sfla1
As Far as why specially women: "Women also need health care more and access the health care system more than do men. While part of this is due to their reproductive and sexual health needs, they also have more chronic non-reproductive health issues such as cardiovascular disease, cancer, mental illness, diabetes and osteoporosis." Details: https://en.wikipedia.org/wiki/Women%27s_health#%3A%7E%3Atext%3DWomen_also_need_health_care%2Cmental_illness%2C_diabetes_and_osteoporosis.?wprov=sfla1
Yes, reading the spec there seems to be a missunderstanding about how the distribution of encrypted messages works. You can't revoke access to something once you've distributed it over a decentralized network. A better solution would be to use your Nostr signing key to gain access to a session where the information is then sent to your computer. Then you can revoke access to the signing key at a later date if you need to do that.
Can there not be time bound key access?
Can there not be time bound key access?
Isnt that already an issue with any info?
Yes, you are right, it is the issue with any info. So you can encrypt a message to a pubkey, or encrypt a message to a shared key, but you cannot revoke access to that data after. The only way around this is to link to some centralized service where the data is stored, and even then people can take photos and/or copy and paste the data.
So since thats never going to change, fuck it. Stay centralized with others controlling your data is your answer?
The answer is to use encryption and assume that the data will be decrypted by the people in possession of the keys and once that happens the data cannot be taken away. If you're trying to give someone a file, and then revoke access later, then you need to have a centralized system with a login. Even then you cannot stop them from copying the file via other means.
This sounds like the current system, which is terrible 😐
Yes, you are right, it is the issue with any info. So you can encrypt a message to a pubkey, or encrypt a message to a shared key, but you cannot revoke access to that data after. The only way around this is to link to some centralized service where the data is stored, and even then people can take photos and/or copy and paste the data.
So since thats never going to change, fuck it. Stay centralized with others controlling your data is your answer?
The answer is to use encryption and assume that the data will be decrypted by the people in possession of the keys and once that happens the data cannot be taken away. If you're trying to give someone a file, and then revoke access later, then you need to have a centralized system with a login. Even then you cannot stop them from copying the file via other means.
This sounds like the current system, which is terrible 😐
Ok I can understand this point