shocknet_justin on Nostr: Key management is an intractable problem that goes back as far as computers using ...

Key management is an intractable problem that goes back as far as computers using cryptography at all, engineers in the 70s and 80s recognized that the ultimate vulnerability of any cryptographic system was not the strength of the mathematical cipher, but the fragility of the human interfaces required to use it.

Every email challenge, 2FA token, username/password, biometric, or even SSL sites you've interfaced with is an abstraction or workaround the difficulty in managing keys.

Seed phrases are hardly an improvement over post-it notes on monitors in the 90s, most disks are volatile storage, and memory is lossy.

Large custodians with geographically dispersed enterprise-class HSMs behind policy engines are going to be the inevitable conclusion for most until we start thinking outside of the box rather than tinkering with toys and treating bad BIPs as canonical.

quoting
nevent1q…5eq6

HWW maxis becoming ETF maxis was not on my bingo card for this week