@dragnucs Your identity is your public key. Your secret key is your responsibility to keep secret. You sign events on the client-side and then send them to the server. The server doesn't know your secret key, only your public key. DMs are encrypted with your secret key.