Nomadic identity is also broken. Never share your private key. It's the most important, fundamental rule of public key cryptography.

That being said, it'd be neat if we could get our Fediverse clients to keep a secret private key that you never share, and sign posts before sending them to the instance. Google/Mozilla have been fighting to lock people out from doing that for decades, but it is possible I guess.

I did see some proposals on that once, let's see...

https://w3c.github.io/vc-data-integrity/

Good luck writing a client (likely in a browser) capable of doing that, but that would enable nomadic identities. Or maybe you already did, and I'm just woefully uninformed?

CC: @Mike Macgirvin@fediversity.site @silverpill@mitra.social