I hope you don't see this as negativity, I am just ranting after reading the generic, almost off topic, comments made when you talk about key management and callbacks and tech stuff (that do interest me). Also how difficult it was for me to onboard someone despite all the key management refinement over the years (or because of it?)

That (your crypto your keys) is precisely the problem that made it so hard to onboard someone at Hive Open Days alicante. They create the account and was bouncing between Keychain and Ecency trying to log in, knew crypto and what keys are and were surrounded by seasoned Hive users. Even then t was confusing and at no point whether the user cared or not about managing their own keys was important because they did not have a choice, it is their keys and they had to learn then and there what owner, active, posting keys are etc... Too much info to dump at someone we are trying to onboard spontaneously.

Maybe managing someone else's keys for them isn't the blockchain sin people think it is if it allows for a simple registration/password. The people who care about keys are a minority.

Looking critically at your post, it is attractive to me because I care about my keys and I am technically capable of understanding, but look at the comments that will be made here, and that are made in general on your tech updates, the audience of Ecency is not technically sofisticated, or at least if they are it they do not comment as if they were. They will make generic comments about how Ecency is "easy to use" and "beautiful" and how they "love ecency" because they lack the depth to understand (or comment as if they lack this the depth to understand) what you mean when by URI, protocols, authority handling, signing, HiveAuth, HiveSigner, Keychain, callbacks, etc.

If the actual Ecency audience cannot deeply understand a post about Ecency security, then a random new user has no chance. We need the secure crypto-native path, but we also need a dead-simple normal-user path.

Ecency has a feature that makes it better than PeakD even for me who care about my keys, I can import my key and not be bothered by the keychain signature, that is a HUGE step. The next steps would be dropping the dogmas that brought us to 5 cents, some users don't want to manage their keys, they want to login with a username and password.