Global Feed Post Login
Replying to Avatar Asone

Yesterday, while working on my authorization server for my relay, I was wondering :

What would happen in clients if a #nostr #relay were to spoof some events.

Example :

Alice sends an event to relay B and C, let's say a simple "Hello world".

All relays accepts the event and stores it. However, relay C modifies the content of the event. When referring to the note, the content relay C would return would be "Hello Satoshi".

Therefore, a client connecting to those relays would receive two different events with the same Id.

How clients would/should behave ?

Avatar
Asone 2y ago

C.c nostr:npub180cvv07tjdrrgpa0j7j7tmnyl2yr6yr7l8j4s3evf6u64th6gkwsyjh6w6 nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z ?

Reply to this note

Please Login to reply.

Discussion

Avatar
Vitor Pamplona 2y ago

The modified event would fail the hash and signature checks and be discarded.

Avatar
Asone 2y ago

Is it done for all events received on the client side ?

Avatar
Vitor Pamplona 2y ago

On Amethyst, yes. Other clients might not do it.

Thread collapsed
Avatar
fmar 2y ago

On nostr:npub1gp4xzpmluelsakjtayc4wtzj97fhj5kakqjvsannu00xkdlf4x8s0xdqyq also yes.

Thread collapsed
Thread collapsed
Thread collapsed