> global identity (pubkey based) Pubkey based is good, but a global identity is a recipe for disaster. Ideally, you derive a unique identity per domain, while

> global identity (pubkey based) Pubkey based is good, but a global identity is a recipe for disaster. Ideally, you derive a unique identity per domain, while still managing only a single (master) key pair at the user-level.