It's kinda like Bitcoin, but it's not on the actual Bitcoin blockchain.
The public key and a "digital signature" are sent over the wire with every note, like, repost, etc. (collectively called "events") you make on Nostr. The events are stored on the relay servers.
(OK, if that's enough for you, you can stop reading here. To learn more about the signature, read on.)
The signature is made with your private key and the message. Anyone who has the public key and signature can, through some math calculations, verify that they match. That's how the network knows it's you.
If I wanted to impersonate you, I would need to craft a digital signature that matches your public key. This is *nearly impossible to do* without the private key; I would need to basically try random signatures over and over again for years.
For more info, there's a great Computerphile video.
https://youtu.be/s22eJ1eVLTU
ProvocaTeach /
npub1w9…d5yk4
2023-07-02 05:13:21
in reply to nevent1q…l0zt
Author Public Key
npub1w9dfnpqdg0uc2smwjyvl7yc8pr2r5jmmjxkvjqygxlsj6kdzdpuqrd5yk4Published at
2023-07-02 05:13:21Event JSON
{
"id": "e5c8b398e872bd5d873e387bc661a6fe4565e41ee0103409d05ca6eae1588d8a",
"pubkey": "715a99840d43f985436e9119ff130708d43a4b7b91acc9008837e12d59a26878",
"created_at": 1688274801,
"kind": 1,
"tags": [
[
"e",
"b4a9009bc5dc2087cf0f6b7ab18407a3728cbe4720f2e2abc801936eb6029686",
"",
"reply"
],
[
"p",
"d51833b112cd7304faf09b7f51a81e2fa2e5eda533858045310db4a89f3cf77d"
],
[
"r",
"https://youtu.be/s22eJ1eVLTU"
]
],
"content": "It's kinda like Bitcoin, but it's not on the actual Bitcoin blockchain.\n\nThe public key and a \"digital signature\" are sent over the wire with every note, like, repost, etc. (collectively called \"events\") you make on Nostr. The events are stored on the relay servers.\n\n(OK, if that's enough for you, you can stop reading here. To learn more about the signature, read on.)\n\nThe signature is made with your private key and the message. Anyone who has the public key and signature can, through some math calculations, verify that they match. That's how the network knows it's you.\n\nIf I wanted to impersonate you, I would need to craft a digital signature that matches your public key. This is *nearly impossible to do* without the private key; I would need to basically try random signatures over and over again for years.\n\nFor more info, there's a great Computerphile video.\n\nhttps://youtu.be/s22eJ1eVLTU\n",
"sig": "8ec57ce686256c4b5ceaf10ce4f83069cbf80d4081e3ac492104ffefbe1e2ecc5193f8dc977c15dd201ba1f23cebcab336afe47a6062c1b06009c5ba9a7db0b3"
}