The Winchester Coin Club forum uses a unique approach to online identity and community moderation. Instead of usernames and passwords, it uses cryptographic keys—the same technology that secures Bitcoin and other cryptocurrencies.
When you join the forum, your browser generates two related keys:
Think of it like this: Your private key is like your unique handwriting, and your public key is like a document everyone can use to verify your signature is real.
You don't create a password. You don't verify an email address. Your keys are stored in your browser's localStorage, and they identify you automatically when you visit the forum.
Instead of having moderators or administrators approve new members, we use a vouching system:
This creates a "web of trust" where the community itself decides who can participate. There's no central authority—just members vouching for members.
When you post a message:
No one can forge your signature because they don't have your private key. Everyone can verify it's really yours using your public key.
#uscoin or #forsaleTraditional forums have moderators who approve or ban users. Our forum distributes this power among all members through vouching. It's democratic and resistant to single points of failure.
The vouching system makes it hard for spammers to flood the forum. They'd need to convince a real member to vouch for them, and members who vouch for spammers lose credibility.
Your cryptographic identity isn't tied to Winchester Coin Club. The same key pair could work on other forums or systems that use the same technology. (Though currently, it's specific to this forum.)
If you have a Directus account (you're a club member or friend token holder):
Q: What if I lose my keys?
A: You'll need to create a new identity and get vouched again. Export your keys and save them securely if you want to preserve your identity.
Q: Can I use the forum on multiple devices?
A: Yes, but you'll need to export your keys from one device and import them on another. (Import functionality coming soon.)
Q: What if someone vouches for a spammer?
A: The community can track who vouched for whom. Repeated bad vouching would damage someone's reputation.
Q: Is this really secure?
A: Yes. The cryptography (ECDSA P-256) is the same standard used in banking and cryptocurrency. Your private key never leaves your browser.
Q: Can admins read my private key?
A: No. It's generated in your browser and stored locally. The server never sees it.
For technical details, see the Technical Design Document.
Winchester Coin Club - Building community through trust