@taylanb by "sovereignty" you mean that it simply doesn't do anything to verify identity and leaves the user up shit creek without a paddle? There is nothing in the protocol preventing me from pretending to be you. I can simply began posting to a relay as you, with a separate key. If I mirror most of your posts you wouldn't even notice unless you went ahead and manually compared fingerprints.

@JustusWingert

You wouldn't know unless you manually compared fingerprints... so do that?

In Nostr users are identified by public key, right? So if you're posting with a separate key then you're not pretending to be a the user, you're identifying yourself as a different user mirroring all the posts.

I don't think this criticism is especially valid since it seems to be saying Nostr offers no protection except the one it offers.

@taylanb@mstdn.social

@volkris that's the problem. ActivityPub uses the individual servers as foundation for a web of trust. Nostr rejects that notion. There is no mechanism that positively identifies one random number from the other. Systems like Threema have a complex verification scheme for that very purpose. PGP does too. Mastodon/AP doesn't need that, since it's not trying to be private. Nostr simply doesn't give a shit and leaves the User without any tools to be safe. @taylanb

@JustusWingert

I don't think the distinction is quite as stark as you make it sound.

After all, I could start mirroring all your content as JustusWingert-at-mastodon.hacker and it would get to the same result: to paraphrase, it wouldn't be noticed unless someone went ahead and manually compared domain names.

Domain names which are often enough clipped off the screen.

In the end I think the advantages of the relay model over the instance model might make this marginal increase in userfriendliness not really worth it.

@taylanb@mstdn.social

@volkris nostr does not contain anything to deal with spam, illegal content, other unwanted content, etc. and simply offloads the burden to the enduser. It's a prime example of doing the easy part, then claiming everyone else is dumb and make a lot of noise. Typical cryptobro scam. Again, they're literally selling snakeoil on their main page...

Follow

@JustusWingert

You keep talking about offloading the burden to the end user, but I'd see it as allowing the end user control over they experience!

Unwanted content? Who's wants? I'd say the end user's wants are what matters most there, so YES, I want the end user to have say over the content he sees.

It's fine if you don't personally value that, but you seem really against this system for reasons that range from differences without distinction through your own personal preferences.

Sign in to participate in the conversation
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.