That's a signature of nothing though. sure the pubkey signed that event but it only proves that they signed a k:33333 event, it doesn't relate to the feed at all
For example I could easily copy that feed, modify it, host it on my own site and say its your feed
https://npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr.nsite.lol/feeds/example.xml
The difficulty of cryptographic signatures is that they only work if your able to hash and sign the content itself. otherwise they are kind of pointless
hzrd149
npub1ye…pknpr
2025-02-18 19:17:55
in reply to nevent1q…nrr7
Author Public Key
npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknprPublished at
2025-02-18 19:17:55Event JSON
{
"id": "c5ef94efa4fb0028fd6476d0a0f01e0d093409c5e990927447bd9934b741da43",
"pubkey": "266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5",
"created_at": 1739906275,
"kind": 1,
"tags": [
[
"e",
"95e15bda61fc6856171b303cf850c5ad9c6d76dd5a8eaf0699763af03fc402a7",
"wss://relay.damus.io/",
"root",
"23103189356cf7c8bc09bb8b431fc3e71e85582c8f755b9ee160203c9c19e403"
],
[
"e",
"7ceae65848baf57fb8ec34c19918c7d1bd9f8a2a593fd04dd1fb27a8038fd2d8",
"wss://purplerelay.com",
"reply",
"23103189356cf7c8bc09bb8b431fc3e71e85582c8f755b9ee160203c9c19e403"
],
[
"p",
"23103189356cf7c8bc09bb8b431fc3e71e85582c8f755b9ee160203c9c19e403"
],
[
"p",
"266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5"
],
[
"p",
"fa984bd7dbb282f07e16e7ae87b26a2a7b9b90b7246a44771f0cf5ae58018f52"
],
[
"client",
"noStrudel",
"31990:266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5:1686066542546"
]
],
"content": "That's a signature of nothing though. sure the pubkey signed that event but it only proves that they signed a k:33333 event, it doesn't relate to the feed at all\n\nFor example I could easily copy that feed, modify it, host it on my own site and say its your feed\nhttps://npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr.nsite.lol/feeds/example.xml\n\nThe difficulty of cryptographic signatures is that they only work if your able to hash and sign the content itself. otherwise they are kind of pointless",
"sig": "abfbfdfc7808df1e1910b34f1114c848606d601ae1aae4c83494b5acd5d2b159666306c8a5df2e4b5bde96304a6443cc3227f7a2c7ba1b7afa587f1c799aaf2f"
}