Nuh 🔻

working on the most minimal decentralized identity I can think of.

https://pkarr.org
https://app.pkarr.org
#pkarr:matrix.org

Public Key

npub1jvxvaufrwtwj79s90n79fuxmm9pntk94rd8zwderdvqv4dcclnvs9s7yqz

Profile Code

nprofile1qqsfxrxw7y3h9hf0zczhelz57rdajse4mz63kn38xu3kkqx2kuv0ekgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3vamnwvaz7tmzd96xxmmfdejhytnnda3kjctvs700pc

Publishing to

relay.damus.io

bitcoiner.social

dash.mockingyou.com

Author Public Key

npub1jvxvaufrwtwj79s90n79fuxmm9pntk94rd8zwderdvqv4dcclnvs9s7yqz

Show more details

Last Notes

2024-09-20 10:15:00

You can make HTTPs (TLS) request to a Pkarr top level domain, without relying on ICANN at all.
(I know because I tried it)

2024-09-12 17:17:05

- reply

in the git repo there is section about republishing.
but long story short, service providers are the ones republishing their users records.
there are more opportunities but that is the fail safe approach.
the problem is, relays are not actual service providers so that paradigm is not a perfect fit, but they can implement whatever criteria they want, including dropping keys that no one is asking for anymore.
in a proper sustainable setup, servers know what accounts they have :)

2024-08-27 06:28:09

- reply

But that's the point, this regulation kills any competition, unless the competition enforces e2ee like you said, and then most users will stay away because they will keep losing their encryption keys.

2024-08-27 05:31:00

- reply

They can and are trying so hard to make that illegal too, it is not like existing laws aren't as equally absurd.

2024-08-27 05:30:03

- reply

What if I am running extremely tiny business that just happens to serve a very distributed client base? Are those businesses just unfeasible legally anymore?
Of course not, people will keep doing that, but because they are small they are not a target.
I hate this whole thing it is depressing.

2024-08-25 09:00:19

- reply

I am sympathetic to the idea that servers shouldn't talk to each other, but if you do trust your homeserver, wouldn't it talking to foreign servers on your behalf, at least hide your ip among other things?
Not sure what leakage are you referring to and what is the threat model.

2024-08-25 07:56:54

- reply

Not sure is that a criticism because it is not P2P? Or because it isn't a centralized server like Signal.
I enjoy Signal too fwiw.
I usually don't care much about leaking who I am talking to and when, vs the content of conversations.
But I understand the concern.

2024-08-25 07:42:14

Matrix is amazing, the only downside is that it doesn't use self sovereign identity, but it should be easy to fix that. Some day. #note1zat…htjh

2024-08-25 07:23:14

- reply

Not any time soon, but hey, if you found yourself crossing the Aegean to Turkey, would love to meet.

2024-08-25 07:16:20

- reply

safe trip, we can pick it up later in a more convenient way, let me know if you want to schedule a call, otherwise I will try to respond to your concerns later when you have time to share all your thoughts

2024-08-25 07:04:47

Counter point, you can trust whatever you choose to trust, including eating at restaurants without testing the food for poison, and of course custodial zaps.
(this is not a dunk quote, a much longer detailed reply is inside)
#note1tka…ue5e

2024-08-25 06:34:26

- reply

No, they can delegate, web hosting have been a thing since forever.
are we going to pretend we can't trust servers that we are already in a trust relationship with to not fake our data?
Not everything needs to be that extreme, life is built on trust, as long as I can always fire a misbehaving server.

2024-08-24 08:04:04

- reply

I am not sure they understand it. If they did, they would have realized that something like Pkarr + any normal HTTPS server satisfies the vast majority of the web usecases.
The only reason to sign data beyond that, is if you are publishing something worthy of gossip, like Torrent or Git repo.
You don't need a witness when there is only two parties involved, the client and the authority.
But instead people take about signing data in a very religious way. Users don't need to sign every damn thing, especially when the price of that is losing your identity every time you lose a signing key.

2024-08-24 05:47:21

I desperately need people to understand that data doesn't need to be signed (be self-authenticated) if you download it from the authoritative source and you trust the DNS and e2ee between you.
If you don't have gossip infrastructure (and demand) in place, signed data is dead weight and larping.

2024-08-17 09:00:17

- reply

The one thing that never happened in these lands, in 1000s of years of shifting powers, is mercy for falling elites. This is not Ireland, this is not South Africa, this is not Germany.
Minorities may survive here, but the defeated masters never live to try again.

2024-08-17 08:47:43

zionists, by insisting on becoming a minority rulers in Mesopotamia, are like a man who voluntarily stepped on a land mine, they can't left their leg without losing it, but they also know their leg will eventually give.

2024-08-16 06:14:43

"This genocide went for so long, that it lasted full pregnancies, and killed the mother and her new born children too."
zionism evil is unmatched, even by the middle east criteria and that is really something.
https://twitter.com/academic_la/status/1824286723976962529#m

2024-08-16 00:10:46

zionists continue, with full institutional backing, to steal people's land, and kill anyone who resists, then they will complain when that backfires later.
This is why you shouldn't condemn any violence against zionists, they deserve it
https://xcancel.com/IhabHassane/status/1824058968701915491#m

2024-08-15 23:55:18

zionism is going to the remnants of the community you ethnically cleansed, and currently militarily occupy, and started burning their homes door to door while they are in it hoping to burn families alive, as they have done before.
https://xcancel.com/NTarnopolsky/status/1824152750256758961#m

2024-08-15 07:04:17

- reply

If you bend backwards to assume the best I people, then "liberal zionists" are not evil trying to maintain the public image of genocide, but just entirely delusional and out of touch with their society's nature or at least present and future, but then they still deserve ridicule and shame.

2024-08-15 07:00:44

- reply

Interesting framing, which isn't far fetched, but more importantly the internal politics became so deranged that he has to sound as deranged or he will lose to even more deranged politicians.
This is why I say the charade of liberal zionism is never happening again, despite people living in denial

2024-08-15 04:06:19

zionists are trying to distance themselves from their own atrocities, pretending that the problem is in their current government, not in zionism. They will never get any other sort of government ever again.
https://twitter.com/academic_la/status/1823788049563795683#m

2024-08-09 11:09:28

What went wrong, so that a free library, is still richer browsing experience than the internet?

2024-08-05 15:23:59

"It might be justified and moral to cause 2 million gazing to die of hunger but the world wouldn't let us" - zionists
https://www.timesofisrael.com/liveblog_entry/smotrich-might-be-justified-and-moral-to-cause-2-million-gazans-to-die-of-hunger-but-world-wont-let-us/

2024-08-04 19:59:39

- reply

I don't know either, that's why am asking, I think all this compliance shit is vague on purpose, so maybe the question s futile.

2024-08-04 17:32:52

- reply

Would the illegal websites issue be less problematic if the encryption is end to end?

2024-07-30 08:27:43

https://nostrcheck.me/media/930ccef12372dd2f16057cfc54f0dbd94335d8b51b4e2737236b00cab718fcd9/6d16f3b1e23526a50e1e726af4974e4fc1f7babe82c1ce456e5b53b40f5f6eac.webp

2024-07-29 12:33:54

- reply

dns is not the issue, not even a little, running servers from home is a solved problem, http tunneling is perfect, the real unavoidable problem is that maintaining servers suck and no one wants to do it.
in fact the very idea of Nostr was based on that thesis as opposed to the p2p thesis.

2024-07-26 12:05:13

- reply

"advertise" where? where should I advertise for everyone to find me? damus relay?

2024-07-26 06:51:53

- reply

The main argument for proxies then are that personal relays might have less capacity and/or availability than proxies that are basically trustless caches or CDNs at this scenario

2024-07-21 09:03:13

Driven and honest >>>>> Expert and correct.
As the former can obtain expertise and correct their wrongs, but without drive nothing gets done, and without honesty you can't even face the fact that nothing is getting done let alone efficiently or wisely or in good taste.

2024-07-20 07:33:10

- reply

they don't use ION anymore they use Pkarr but encode a DID in it, because of course they would

2024-07-20 07:29:44

- reply

you are too focused on ports or web servers. A web server is just an executable, and opening ports or using free http tunneling service is the easiest part about hosting your own data. And the simplicity you win using holepunching , you lose on the other side because it doesn't work in browsers, unless you then use a relay, but then that is what an http tunneling service is.
finally, people don't want to host their own data, not because they physically can't open a port, but because they then need to manage electricity, connectivity, handle any bugs, upgrades, database migrations, backups etc.
sure for popular stuff like movies on Bittorrent it is magical, but if you are going to be mostly the only provider of the data, might as well just use a hosting service you trust. otherwise you are just pretending.

2024-07-20 07:22:05

- reply

you are thinking of ION, that is mostly now a abandoned, they made a new DID called did:dht based on https://Pkarr.org

2024-07-14 09:07:12

Watching Americans censor themselves so hard, and wisely so, makes me wonder if the USG only speaks softly because they are carrying a really big stick, while ruthless authoritarian regimes are just compensating for a precarious control over their societies.

2024-07-10 05:52:49

"Stop Antisemitism" abused that term so much that their account is nothing but a constant signaling of how ineffective that accusation became, absolutely no one gives a fuck and rightly so.

2024-07-09 14:06:00

- reply

No words matter, when you call something Nostr identity or Bitcoin identity for that matter, you are implying that there is an added value to the bare keypair.
So when you call it Nostr identity, you can't then say it is not dependent on Nostr relays, since without Nostr relays, there is no added value beyond just being a keypair.
And when you say they scale to billions of users, that is meaningless, it is like saying bitcoin can scale to billions of users since you can make billions of addresses.
Again addresses and keypairs are meaningless alone, they get 100% of their features from elsewhere, they gain identity ONLY when there is an attached social graph, they gain value ONLY when they author data or transactions, etc.

2024-07-09 11:31:34

- reply

You are calling a keypair an identity, because eventually there will be web standards that Nostr refuse to use, but you insist to call that Nostr still.
That is ridiculous, why do you call it Nostr and not just Bitcoin identity then?

2024-07-09 08:56:02

Openvibe is great, ot definitely favors Bluesky and Mastodon though, since Nostr has no key delegation, so if the -closed source- app leaks your keys, you are screwed.

2024-07-09 08:48:34

- reply

As I said, it is a separate identity ONLY if you consider npubs ... just pubs lol. The only thing that makes npubs separate from bitcoin any secp is that they have attached data that can only be found on relays. And since Nostr has no proper way to map keys to relays, running your own relay after the popular ones die is useless, all because nostr devs refuse to be pragmatic and realize DNS existed for a reason.
And as you say, delegation is being deprecated and it never took off, and no actual discussion about it is happening other than nsecbunker.
And this unique value proposition is nonsense, any DID or Pkarr or any domain name with DNSSec can specify a secp key and gain these advantages, while still being resolvable in the first place.

2024-07-09 08:39:25

Hello from Openvibe!

2024-07-07 13:47:40

This is not true at all
1. Nostr identity is impossible to separate from Nostr relays, there is no other working network to find information about a key, not even simple stuff like Signal username or Matrix ID.
2. Even if you mean identity as in Auth mechanism to centralized servers, that is basically LNURL auth then and it sucks.
3. Without delegation, these keys won't fuckin last, billions of users is a pipe dream, it is a struggle to even get software engineers to secure active keys for a month straight!
That being said, I agree in general that we can give sovereign identity to billions of users, much easier than decentralizing real-time social applications. I just don't think Nostr keys are good enough.
#note14ct…dkc6

2024-07-07 13:37:05

I take this back, if the username is TLD (Pkarr) you don't need TXT.
TXT is still useful for information that isn't about servers, for example PGP keys, even if these keys are valid pkarr tld since if they are ed25519, it is still not appropriate to put it in SRV.
#note15ym…lv40

2024-06-27 11:04:25

- reply

you?

2024-06-23 13:05:16

Very few people understand the value of hashes and signatures in Nostr, they think it is sovereignty thing, it is not, it is lack of authority thing. If nostr had an authoritative strongly consistent server for each user, hashes and signatures would be limited to gossip through 3rd parties, but because there isn't any authoritative servers (some try to add that in retrospect with outbox model) all parties are 3rd parties.
Nostr is not trustless from the user's point of view, no user ever checked if the content of the post they are reading actually match the hash or correctly signed, that is larping.
self authenticated data is an efficiency optimization, NOT security feature.

2024-06-18 11:42:47

- reply

There is no need for a NIP, if Nostr devs can't be bothered to do what Fiatjaf wants, ain't no chance anyone will care to integrate a whole incompatible identity (npubs are entirely different curve than ed25519).
the only viable solution is to start over :)

2024-06-18 11:37:18

Again, that is like saying you can't spec DNS ... you can, and you absolutely should for there to be web at all... at all
#note1ft9…2fqy

2024-06-18 04:32:20

this is like saying "web servers go down all the time, so why bother with DNS"
#note1397…r444

2024-06-18 04:28:22

imagine if finding the ip address of a domain was a philosophy not a spec... please don't build a web3.0 if it is going to suck at the most basic functions of web1.0
#note16ma…9fts

2024-06-17 15:31:07

do you want to have this mind-numbing argument with everyone, or do you want URLs to work? use pkarr.org
#note1z5t…muqw

2024-06-17 13:33:15

sigh... guys, if we are going to reinvent the web, we better start by not failing at what DNS has been doing reliably before we were born. and yes I will post the link again pkarr.org
#note1cwl…2suw

2024-06-09 05:30:17

Any sufficiently advanced digital identity is indistinguishable from domain names.

2024-06-02 16:48:36

- reply

not arguing against you, but DMs have a super power; it is easy to keep censorship resistant, because it is a small world. all you need is a protocol, servers and sovereign identifiers to migrate between servers while keeping your ids.
another superpower; people actually tolerate when chat history is lost due to losing encryption keys.
I would say we should focus on DMs more than social since it is easier to get done, but Matrix is good enough so not very urgent to reinvent

2024-05-26 14:38:00

- reply

1. unbounded state make me nervous, but I guess if the Mint gets a fee from every minting operation, it can adjust the fee to cover the cost of storage.
2. do you think mints should use OTS in case someone contests that a secret was spent?

2024-05-26 14:08:01

- reply

reading the spec, do mints need to keep all "spent" secrets forever?
also, is there a way for a 3rd party to audit whether or not a secret was spent?

2024-05-21 09:52:57

- reply

you are mistaken, Nostr isn't better than Mastodon because it offers unique storage solution. You can backup your Mastodon posts just as well, the difference is Mastodon server owns your identifier, so even if you upload all your posts to your own Mastodon server, you lose your identity (and thus followers).
Nostr commits posts to your public key, and demands that your followers look for you using that key.
of course, it doesn't answer how should your followers find you except by a coincidence of publishing and reading from the same relays.
Pkarr.org offers an answer to that question, but it is not compatible with Nostr keys unfortunately

2024-05-21 05:11:52

- reply

money laundering

2024-05-09 13:05:56

- reply

Not the first crusade.

2024-05-08 06:33:18

This stupid FUD around Signal is irresponsible, you are discouraging people from using the best option and they will end up using Telegram and other stupid shit instead. Do better.

2024-05-06 17:36:13

- reply

yup, there has to be a viable alternative before preaching blaming people for going with with status quo

2024-05-06 16:15:53

- reply

I don't think that is true. while copying others without understanding the "why" is a true force of nature, developers are still lazy, and if they could let you login with zero fraction they would.
But it isn't feasible, so even when someone wants to avoid the email/sms thing, they often find and alternative like invite codes or debit card verification without immediate payment.
Take your own advice, and admit that there is a problem and try to find an alternative, because shaming these companies won't work, because they can't afford to implement nothing, unless they aren't offering any persistence of data, which is what Nostr relays opted for and it doesn't work for 99% of businesses.

2024-05-06 15:38:33

- reply

that is the point though, it is a cheap way to do sms verification without incurring the cost of sms. and businesses need that to deal with Sybil, what is the alternative? whoever invents an alternative will become immortal like Satoshi if not more.

2024-05-06 15:36:15

- reply

some are excessive about it, but all need a way to prove you are a human, and they just assume Gmail verified you with SMS so that is basically the outsourcing of Sybil resistance.
what is the alternative, because not every service can be an altruistic relay with no strings attached.

2024-05-04 18:48:13

- reply

why is it any worse than hosting Nostr events?

2024-04-14 08:35:30

- reply

one thing Nostr can't have without reinventing merkle trees with events (which be awfully inefficient): verifying that migration was pr wasn't complete.

2024-04-12 07:31:01

Humanizing zionists is irresponsible and you should support and celebrate killing them all
https://m.primal.net/HuDV.jpg

2024-04-12 06:59:29

Pkarr.org will be even faster and more reliable than finding the Outbox relay of someone on Nostr. Embrace it, Nostr is still young enough.

2024-04-11 06:52:55

- reply

the caching services already have kinds so you can consider them specs, but then every app wanting to have an edge will keep creating more RPC methods to satisfy their UI, it is impossible to make a spec for this that has any chance of ossification.
search is impossible to decentralize, and that is what all popular Nostr apps will become, frontend to search engines.
switching apps is the best we can ever do and that is great, because we don't even have that now with current social media.
if you ignore social media and focus on usecases that are much less expensive to crawl on your own at edge devices, things get much brighter, so I think people should focus on small worlds if they need the absolute most censorship resistance.
good thing is, small worlds are better anyways.

2024-04-11 06:44:34

this is true and inevitable
#note1hpu…0wvs

2024-04-08 10:14:30

Beautiful engineering inside
#note1j7r…4z06

2024-04-08 10:10:58

- reply

Is there a cleanup for that mmapped events file, or is it left to grow indefinitely?

2024-04-07 19:22:22

The web, long centralized, must decentralize; Long decentralized, must centralize.

2024-04-07 05:51:03

web3 is actually a good name that shouldn't be abandoned, whether you like it or not Nostr is a part of a struggle to birth a third generation of the web.

2024-04-05 05:52:56

annihilation of zionism in our lifetime 🙏
#note10mk…eguh

2024-04-03 13:26:02

- reply

all details about ed25519 vs secp256k1 are red herring, except one; Mainline DHT uses the former.

2024-04-02 05:33:36

Good morning, and Death to zionists

2024-03-27 05:38:41

Humanizing zionists is irresponsible and you should support and celebrate killing them
#nevent1q…95dw

2024-03-23 08:04:28

Got my Twitter account suspended finally :)

2024-03-23 00:22:10

- reply

How is migration supposed to work? The client just download the entire user history of events and rebroadcast them?

2024-03-22 22:12:38

- reply

The question was, why people don't implement the outbox model, and the answer is, because it is too difficult and hard to control its quality. Whereas Pkarr does the tried and tested strategy of DNS, just with sovereign TLDs.
Of course designating a relay as your Outbox is smart, in fact most people call these datastores :)

2024-03-22 22:04:45

- reply

It removes the complexity of actually finding that "outbox", because it is as straightforward as DNS, imagine if every HTTP client needed to go giga brain on finding where every hyperlink is hosted, the web wouldn't scale.
More importantly you can tell people what "big" relay fo you trust besides the outbox, getting all the scalability of centralized few relays while maintaining the unilateral exit if that relay bans you, with much less disruption of hyperlinks resolvability

2024-03-22 21:57:27

- reply

https://logperiodic.com/rbsr.html#acknowledgements

2024-03-22 21:54:50

- reply

The sync between Strfry relays.

2024-03-22 21:39:40

The sync algorithm in Willow is already in Negentropy
#nevent1q…k8qr

2024-03-20 17:02:05

Save yourself the pain, and use Pkarr.org
#nevent1q…y8p6

2024-03-18 07:32:57

Counterpoint: if you have to shame people to do adopt something, then it clearly doesn't provide any sufficient value.
If you buy Bitcoin out of principle instead of being grateful it exists to fulfill a dire need, you should sell it.
#nevent1q…wwvc

2024-03-17 13:53:28

- reply

Because it is undesirable. It is very easy to open a port and relatively easy to get dynamic dns account.
So everything that p2p offers is easy to replace by normal Internet Protocol.
But it is impossible to make a scalable network with good UX when every user has to be a devops engineer.
Discovery and search are also physically impossible to do in p2p, beyond simple distributed hash maps. You can't do distributed Google, or distributed notifications or distributed counting of likes or distributed threads. All of these need centralization.
For 1-on-1 stuff like private chat rooms, things are much simpler, but again, you need every user to have their own always online server. That simply won't happen. Civilization is entirely about division of labor. People can't do everything on their own.

2024-03-03 01:47:03

- reply

2024-02-29 11:30:52

- reply

I admire the craftsmanship sir

2024-02-28 00:49:36

Nostr is supposed to be the search layer. If you end up using conventional search, then Nostr is used as an adhoc data store, and it isn't good for that at all.
Let's try again this year :)
#nevent1q…3xu4

2024-02-28 00:44:42

- reply

That is perfectly reasonable, but my point stands that the only alternative is to use a DHT that supports secp, and then all your choices are going to be so small that censorship resistance isn't as credible as Mainline.
There are creative ways to use Pkarr in backwards compatible ways, similar to how Nip05 is optional, but it is not a thing I will personally propose because it will be perceived as hostile NIP probably.

2024-02-26 11:44:00

If the space you are building can't be legitimately called "the web", then something is wrong. The web is already great; dns+hyperlinks+browsers, so why build something else instead of just make it a bit better?
#nevent1q…a338

2024-02-26 11:39:15

- reply

If you remember, I told you I will build something that uses Mainline to point to anything like DNS, that became Pkarr.org that did:dht is based on.
If you are open to adopt it despite not being secp256k1, let me know.
Also check what Iroh wrote about it iroh.computer/blog/iroh-global-node-didcovery

2024-02-24 15:03:49

- reply

Good luck.

2024-02-24 08:46:01

Nostr should use pkarr.org directly, dids are stupid.
#nevent1q…5tye

2024-02-24 08:45:14

They gave up on ION because it has always been moronic idea, just like did:plc
They eventually gave up and built a DID on Pkarr.org instead.
#nevent1q…r5mt

2024-02-24 08:43:27

- reply

Except Mainline is a decade older than IPNS and IPNS doesn't fuckin work like all protocol labs garbage

2024-02-18 14:28:02

- reply

Except the UX and onboarding of that is terrible. At least in the beginning, maybe for increasing account limits.

2024-02-18 14:25:18

If you know the person who was talking about a DHT for nostr on Stackernews, tell them you can't bootstrap a an overlay network that scales censorship resistance that easily, if at all.
Just use the existing millions of nodes already pkarr.org

2024-02-12 13:10:18

SMS is not about KYC, it is about Sybil protection because they have to provision scarce resources to users. So absent payments, you need some proof of humanity no matter how flawed it is.
What is the alternative? And no, PoW is not good enough.
#nevent1q…uyvw