Key rolling and the Nostr identity comparison

Argues that the incident is a case study in key rolling: owners rescuing funds from a COLDCARD are swapping keys while keeping ownership of the value, so ownership is never permanently bound to a bad key. The post then turns that into a criticism of Nostr, where the npub is the identifier an identity is built on, so an exposed or weakly generated key cannot be rolled off without losing the identity, and it closes with an attached diagram contrasting the two cases. Held because it is one of the few reactions that draws a general protocol-design lesson from the incident rather than a wallet-choice one. Interest: the post ends by trailing a forthcoming open-source identity effort the author says he is working on with a named collaborator, so it doubles as a promotion for his own project. The Nostr characterisation is the poster's own and is not verified here.