it's the same as all auth systems... you have a secret that the protocol allows you to prove you have without giving it to the other side (for nostr that is signing an event, the signature validates on the public key, on normal login systems you send the password but they immediately hash it and compare to the hashed password of your account)
the nostr auth protocol is stronger than standard logins, a LOT stronger
mleku / mleku ✝Ⓐ☯︎
npub1fj…mleku
2024-09-21 09:45:09
in reply to nevent1q…pf29
Author Public Key
npub1fjqqy4a93z5zsjwsfxqhc2764kvykfdyttvldkkkdera8dr78vhsmmlekuPublished at
2024-09-21 09:45:09Event JSON
{
"id": "2e3fc332535efe3d1312e173bdd813560fc7366825aebd2f52d72bedd9490141",
"pubkey": "4c800257a588a82849d049817c2bdaad984b25a45ad9f6dad66e47d3b47e3b2f",
"created_at": 1726911909,
"kind": 1,
"tags": [
[
"p",
"7cc328a08ddb2afdf9f9be77beff4c83489ff979721827d628a542f32a247c0e",
"wss://nos.lol/",
"cloud fodder"
],
[
"p",
"44dc1c2db9c3fbd7bee9257eceb52be3cf8c40baf7b63f46e56b58a131c74f0b",
"wss://freelay.sovbit.host/",
"Enki"
],
[
"p",
"52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"wss://relay.damus.io/",
"semisol"
],
[
"p",
"70122128273bdc07af9be7725fa5c4bc0fc146866bec38d44360dc4bc6cc18b9",
"wss://nostr.wine/",
"buttercat1791"
],
[
"p",
"036533caa872376946d4e4fdea4c1a0441eda38ca2d9d9417bb36006cbaabf58",
"wss://relay.nostr.band/",
"ChipTuner"
],
[
"p",
"fd208ee8c8f283780a9552896e4823cc9dc6bfd442063889577106940fd927c1",
"wss://christpill.nostr1.com/",
"Silberengel"
],
[
"e",
"6af756b54ae91e2376580be5011063612f6dc3685b5b50e28c8348ed736adbb2",
"wss://freelay.sovbit.host/",
"root"
],
[
"e",
"919453812c9c4d776d8c963a616a29af928b162b54f0b66948fc581bf82d1213",
"wss://freelay.sovbit.host/",
"reply",
"44dc1c2db9c3fbd7bee9257eceb52be3cf8c40baf7b63f46e56b58a131c74f0b"
]
],
"content": "it's the same as all auth systems... you have a secret that the protocol allows you to prove you have without giving it to the other side (for nostr that is signing an event, the signature validates on the public key, on normal login systems you send the password but they immediately hash it and compare to the hashed password of your account)\n\nthe nostr auth protocol is stronger than standard logins, a LOT stronger",
"sig": "f3db31318180e29fdc970ff7dcd56d39519810389b1522a7ee3936d1cf258242346099f87b144d03884712396cabbe4f3fa05e9cfda48291127071133082d4ea"
}