Is my IP also permanently stored in Nostr? Or the client?
#asknostr #nostr #privacy
Discussion
The relays you connect to can see your IP.
What VPN do you recommend?
Mullvad takes bitcoin payments.
But is it good in terms of security? I don’t want a vpn stealing my nsec 😱😱
That’s not how it works. VPN has nothing to do with your nsec. Use an extension or signer app. Don’t plug into random new nostr clients
Well everything goes through the vpn, including your loggin credentials to any site, that’s why I turn it off while logging in.
There are no credentials on nostr. You are not authenticating to any server. You sign an event and send it to a relay. We use cryptographic signatures to do this.
I know that, I said “any site”.
I also know that, but that signature leaves your device through your vpn.
The private key cannot be derived from your signature. The signature is stored locally in a client or browser extension or another signer app.
Sorry but I’m not going to explain further. If you truly want to know how it works, search engines are your friend. Look up how nostr signing works and look into cryptographic signatures.
Thanks but I don’t need to go that deep to understand that when a VPN is on everything goes through it. I appreciate it though.
Your nsec never leaves your device. You only ever send proof of ownership of the nsec, never the nsec itself.
ivpn is what i recommend for every reason you can think of
I’ll check it out, thanks
You can connect with TOR on Amethyst if you have this concern, without vpn
I use a VPN, but I turn it off during Loggin to important apps like banking apps. And since I can’t risk losing my nsec I turn it off when logging into nostr. Then I turn it back on.
I use my ipad for everything so I guess Tor is out of the question.
I think it is the best to assume, that everyone knows your IP, your relays and your apps.
Because it is possible that it is logged. And coming from Murphy's law, it will be logged.
And just as an extra, even servers from which you load images are seeing your IP, and can log it.