Josh on Nostr: Love the idea, especially the no helpdesk part. Two problems though. Sovereignty. ...

Love the idea, especially the no helpdesk part. Two problems though.

Sovereignty. Whoever generates the cards holds every nsec, so they own every identity they hand out. And with no key rotation on Nostr, the recipient can never fix that without starting over.

Brute force. A tag has no PIN or lockout. Find a lost card and you can grind the password offline forever. Most people won't pick a strong one.

The key has to be born on something the owner controls. The card works as the backup, not the source.