Seriously? I have seen relays deleting posts they don't like (political positions, etc) without telling anyone. I have seen them delaying posts that have a criticism of the product that happens to be sponsoring them. I have seen them hide counts and act as if those were at the "bottom of the database".

NEVER trust any relay.

Reply to this note

Please Login to reply.

Discussion

They are expected indeed. That's why one should NEVER rely on them. Don't entrust relays to moderate anything because you don't know what they are running.

Clients are always "moderating" because their choice of UI **is** moderation in itself.

That's why I also say people show NEVER use a closed-source client in Nostr. A closed-source client can create and display "events" as if they were signed by the author even if they didn't. They can create things out of thin air.

Use only open-source clients so that you can verify what's happening in code and create an expectation of behavior that can be constantly checked.

I mostly agree with you, but I think we're talking past each other.

is there a way to do software verification where an implementation would periodically self sign a note saying it’s verified its build?

and then also broadcast relay actions?

Even, just to see the relay actions… not to move all trust of moderation to relays.

Yep, it's called reproducible builds. Amethyst has this active. It means that anybody should be able to check if the APK I published matches the code on the repo by recompiling the app with the same code/parameters.

but for relays on servers one would need like artifact sharing?

There is no way to know if they are running the version you think they are and/or if they added anything between you and the code you know.

probably need a tool that caches seen on and then rechecks for seen on later

how did you noticed relays deleting things?

That's disturbing..👎🤔