#m=image%2Fjpeg&dim=1080x257&blurhash=H76%40..%7EXV%3DMxn%24xan%25M_Ri%3Ft%3FbohIobItRWVNGR*&x=ba6db6ccb5f34536529d4bbac19b135ae297d0b5afd87fef00ace2fb038ae8c4
Just shows how flawed nip05 is and especially when not a domain you control
Discussion
I think it’s a big misunderstanding, not a flaw.
nip-05 is just a way to alias a pubkey with a domain name. that’s it.
using a nip-05 provider you don’t control is like hosting your blog on facebook or blogger. they can rug you at anytime. but that doesn’t mean the capability is flawed, it means you chose a custodian.
the problem is clients show nip-05 as a “verified” checkmark like twitter. there is no verification on nostr. it’s permissionless.
Agree
Absolutely. I've always said that eventually identity providers would be rated on various criteria and some will be more reputable than others.