I do find it problematic that the media file that I see might not be what the original author intended to share (due to a malicious server).
The media file (or its sha256) should be included in the event signature, and clients should verify it.
oren_z0 / Oren ☂️
npub1xv…5m7f8
2024-10-18 09:46:04
in reply to nevent1q…9wz6
Author Public Key
npub1xvtw9ky0ly0ppzw8tlhdek965gjck329tga326hkzlt7c7d5tljs85m7f8Published at
2024-10-18 09:46:04Event JSON
{
"id": "210ec08bb7a20fa647c7396729ec32c567a978d205b43e1f4e46d2305168cede",
"pubkey": "3316e2d88ff91e1089c75feedcd8baa2258b45455a3b156af617d7ec79b45fe5",
"created_at": 1729244764,
"kind": 1,
"tags": [
[
"e",
"5046e90fb64e998f267640b37936261b6a9a56ba1b66a6a093d560706734e9c6",
"",
"root"
],
[
"e",
"c2e91ca7f6c0e82a4ee0c1ce3d2e601ae7474b83644f68332554e0eaf925a5d6",
"",
"reply"
],
[
"p",
"434f97993627f1e61f14eeaf60caa8cfdcec10a592caff8250c825252d548c15"
]
],
"content": "I do find it problematic that the media file that I see might not be what the original author intended to share (due to a malicious server).\nThe media file (or its sha256) should be included in the event signature, and clients should verify it.",
"sig": "58f991b42174039439ffbb75384c6b21bea89e3b5db78fc6228396053bfa053b34e1122cc27865b05ac989df816df293a6e9b8276c93e4c949213885d6cd0efd"
}