ed on Nostr: no, their tie their pubkey to someone elses name. Signing would prevent ...
no, their tie their pubkey to someone elses name. Signing would prevent name-spoofing.
For example, i cannot post a message to a relay with your pubkey because i can't sign the message, but i can create a profile with your name and my pubkey because there is no verification. I don't need to hack your server, just create doubt.
btw thanks for responding, i'm implementing a relay and getting to grips with the NIPs, so would be good to know if i misunderstand things.
Published at
2024-09-27 10:31:57Event JSON
{
"id": "9df823f5c203fea9352c21e852fbb01b517f544325cf173f14bd9c66ffcc536f",
"pubkey": "acf88a0308156dd1b3f9de7573f88dd03dea512afadfa37ac35bcf66906d5d4c",
"created_at": 1727433117,
"kind": 1,
"tags": [
[
"e",
"f86e0c742c27ccef50cefba43d057957a64652ba9c92a6be9b87a9ba033503fa",
"",
"root"
],
[
"e",
"00003f45c25d9ba28eec105a7113db4d694df09e42a77bf103eb46f3d517f82c",
"",
"reply"
],
[
"p",
"acf88a0308156dd1b3f9de7573f88dd03dea512afadfa37ac35bcf66906d5d4c"
],
[
"p",
"76c71aae3a491f1d9eec47cba17e229cda4113a0bbb6e6ae1776d7643e29cafa"
],
[
"p",
"7bdef7be22dd8e59f4600e044aa53a1cf975a9dc7d27df5833bc77db784a5805"
]
],
"content": "no, their tie their pubkey to someone elses name. Signing would prevent name-spoofing.\n\nFor example, i cannot post a message to a relay with your pubkey because i can't sign the message, but i can create a profile with your name and my pubkey because there is no verification. I don't need to hack your server, just create doubt.\n\nbtw thanks for responding, i'm implementing a relay and getting to grips with the NIPs, so would be good to know if i misunderstand things.",
"sig": "75a2334b5eba3a2e8113347b50c7af604cee8be7772ff1726cb44e0da792b70d0ebd14f09cd12e1746c54343c813daa76ce48d427f32bb4b440c2ac5aea098d8"
}