DNS - NOSTR-RELAY - NPUBS what's common denominator here ? #tipstr

Either use properly trusted directory service and/or self do it. Then no way u can be victim of phishing or impersonating profile attack or such service downtime situation due to rogue record. if someone loses a nsec then their job announce with new npub and alert the rest.