News for hackers. Stuff that matters.
Re:Nostr: A Decentralized Messaging Protocol by acdha on Friday September 01, 2023 @09:04PM (#37357749)
How does that work in the context of the whole system where I need to link a key pair to a person? If I know you in real life we can check key fingerprints or something (GPG suggests statistically nobody will) but otherwise I have to trust a third-party who says that the Bob I want to talk to has keys X, Y, and Z.

If you don’t do that, as soon as it becomes popular enough to attract scammers you’re going to have Mallory publishing keys with Bob’s name on them and a million random people who have incredible financial opportunities for you. Most of the decentralized systems shift that problem to another system like email or DNS, Facebook/Twitter/GitHub/etc. at which point it’s worth asking whether there’s still value in decentralization at that point.

Re:Nostr: A Decentralized Messaging Protocol by bubersson on Saturday September 02, 2023 @01:58AM (#37358900)
Nostr is quite open for what options people use to become more trustable. People can pay couple thousand sats to get a verification, or as you say Nostr can also do the same with shifting to web of existing sources of identity. E.g. it is well known that this Jack is CEO of Strike (strike.me) and so any nostr client can verify that https://snort.social/p/[email protected] is trustable, because it serves his public key here: https://strike.me/.well-known/nostr.json
Re:Nostr: A Decentralized Messaging Protocol by acdha on Saturday September 02, 2023 @07:40AM (#37360572)
So that’s trust based on the DNS and web PKI systems, not the Nostr protocol.