Replying to Avatar Vitor Pamplona

If you are using the following relays, beware that many clients will not connect, upload or download data from them. Amethyst Push Notifications will also not connect to them.

- wss://relay.orangepill.dev certificate has expired

- wss://ca.relayable.org certificate has expired

- wss://nostr.btcmp.com certificate has expired

- wss://nostr.delo.software certificate has expired

- wss://nostr.drss.io Hostname/IP does not match certificate's altnames: Host: nostr.drss.io. is not in the cert's altnames: DNS:nostr.io, DNS:www.nostr.io

- wss://nostr.libreleaf.com certificate has expired

- wss://nostr.mikedilger.com Hostname/IP does not match certificate's altnames: Host: nostr.mikedilger.com. is not in the cert's altnames: DNS:chorus.mikedilger.com

- wss://nostr.onsats.org Hostname/IP does not match certificate's altnames: Host: nostr.onsats.org. is not in the cert's altnames: DNS:onsats.org

- wss://nostr.openordex.org certificate has expired

- wss://nostr.orangepill.dev certificate has expired

- wss://nostr.plebchain.org certificate has expired

- wss://nostr.unknown.place self-signed certificate

- wss://nostr.walletofsatoshi.com certificate has expired

- wss://nostr.zaprite.io Hostname/IP does not match certificate's altnames: Host: nostr.zaprite.io. is not in the cert's altnames: DNS:examplewalk.com, DNS:www.examplewalk.com

- wss://nostr.zebedee.cloud Hostname/IP does not match certificate's altnames: Host: nostr.zebedee.cloud. is not in the cert's altnames: DNS:names-hub.com, DNS:www.names-hub.com

- wss://private.red.gn.net certificate has expired

- wss://relay.nostr.ro certificate has expired

- wss://relay.orangepill.dev certificate has expired

- wss://relayable.org certificate has expired

nostr:npub1uac67zc9er54ln0kl6e4qp2y6ta3enfcg7ywnayshvlw9r5w6ehsqq99rx does this fit in nostr.watch scope?

Reply to this note

Please Login to reply.

Discussion

With NIP-66, yes. These expired certificates can be found in `30066` events right now. And yes, next nostr.watch would convey these details, and any other data present. But then again, any client could convey those conclusions at runtime with NIP-66

Sent you a private message on 25 June. Am curious to know where I can securely disclose a security issue impacting nostr.watch.

Just message me or post an issue on Github.