hodlbod on Nostr: Thinking about email/password login further, here's a different approach: Instead of ...

Thinking about email/password login further, here's a different approach:

Instead of encrypting at rest using a server key, what if the server never saw the key at all? Instead, the user would simply authenticate with the server, and retrieve an ncryptsec.

To avoid using the same password for the ncryptsec and the server authentication (since that would allow the server to decrypt the ncryptsec), the client could instead send the hash of the user's password to the server. (This would allow the user to avoid remembering two different passwords).

This would put key storage back on the client which comes with its own attendant risks, and benefits.

Is this better or worse than my other design?

nostr:nostr:nevent1qvzqqqqqqypzp978pfzrv6n9xhq5tvenl9e74pklmskh4xw6vxxyp3j8qkke3cezqyw8wumn8ghj76r0v3kxymmy9e3k7unpvdkx2tn5dahkcue0qy88wumn8ghj7mn0wvhxcmmv9uq32amnwvaz7tmjv4kxz7fwv3sk6atn9e5k7tcpzemhxue69uhkzat5dqhxummnw3erztnrdakj7qgnwaehxw309a3kcdpww3hxj7pwv3jhvtcqypavl24zxkmw0m8mateuucp763v4rlnmwewmysc33xx3qejhrv38xy3ndwu