The truly interesting difference is in authentication.
In traditional servers, OAuth tokens are used to protect database write access, because all the rules of the app are made up and stored in the database itself. So the database itself is the "protected resource".
On Nostr, the database is public and open. It has no fantasies, just data. The "protected resource" is actually the user's private key. So authentication is reversed. The server demands authorization from the client rather than vice-versa. Truly mind blowing for anyone stuck in web dev for the past 20 years.
Alex Gleason /
npub1q3…cd26p
2024-12-04 17:07:45
in reply to nevent1q…e3gf
Author Public Key
npub1q3sle0kvfsehgsuexttt3ugjd8xdklxfwwkh559wxckmzddywnws6cd26pPublished at
2024-12-04 17:07:45Event JSON
{
"id": "70df12cb07686a864032c2e06cc4159434f2f1bccee04c08b56b243386037435",
"pubkey": "0461fcbecc4c3374439932d6b8f11269ccdb7cc973ad7a50ae362db135a474dd",
"created_at": 1733332065,
"kind": 1,
"tags": [
[
"e",
"0000789dbbf42ad4bc57c2613029e207e092f0d33c78f76f32521c743e1fb9ec",
"wss://gleasonator.dev/relay",
"root",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
],
[
"e",
"0000d9e74f73186a07d02bce98fd1d4c41ad929f4cd0439a6427b6c6f94d2c73",
"wss://gleasonator.dev/relay",
"reply",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
],
[
"p",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d",
"wss://gleasonator.dev/relay"
]
],
"content": "The truly interesting difference is in authentication.\n\nIn traditional servers, OAuth tokens are used to protect database write access, because all the rules of the app are made up and stored in the database itself. So the database itself is the \"protected resource\".\n\nOn Nostr, the database is public and open. It has no fantasies, just data. The \"protected resource\" is actually the user's private key. So authentication is reversed. The server demands authorization from the client rather than vice-versa. Truly mind blowing for anyone stuck in web dev for the past 20 years.",
"sig": "113fe90a9b7563418ca52ea231b89dbfc036cc72f576ff25f344b637e24ba2d4a15349ae3fbc91f899b7d09a2428221c92cc79e23cbeabd9ac6bc678f6b5cd4e"
}