Replying to lucash.dev

Could also just automatically validate the sig when you interact with a note in any way (like, reply, repost, etc)

Fewer UI changes.

Adding a warning about adding non-trusted relays is also a good idea.
Avatar
elsat 2y ago

Related to the untrusted relays suggestion, Damus has a recommended relays box in settings.

Reply to this note

Please Login to reply.

Discussion

82
lucash.dev 2y ago

Yes. But when you add non-recommended ones there could be a text explaining the risks.

The downside is most people will get scared and never add other relays. Well most people will never add relays manually anyway.

Avatar
elsat 2y ago

What would you tell the user who is adding a non-recommended/non-trusted relay?

E.g. “Warning, this is a non-trusted relay. You are trusting the relay to not alter nostr events transmitted to you. Cancel/Got it. Click to learn more.”

How many times do you display this pop-up - e.g. every time a new non-trusted relay is added?

82
lucash.dev 2y ago

That sounds good to me. Perhaps could add a very specific warning that malicious relays can do phishing by impersonating people you trust.

Avatar
elsat 2y ago

Mockup: