Replying to Avatar steepdawn974

Having a permanent public record of all my npub's activity, plus associated metadata (IP address, timing) - it feels like a disaster to happen.

Not having an option to roll over your identity into a new npub is a major issue for.

It's like constant address reuse in Bitcoin.
Avatar
Melvin Carvalho 1y ago

Completely agree. I mean npub + nip05 + key rotation as it evolves with time. IP address should not be stored. Only the fields the user wants.

Reply to this note

Please Login to reply.

Discussion

Avatar
steepdawn974 1y ago

but the relay operator can always log incoming connections and IP addresses, no? Outside of the Nostr protocol. So they are huge data collection honeypots

Avatar
Melvin Carvalho 1y ago

Yes, unfortunately that is the case. It happens far too often on nostr, for example fiatjaf's njump dot me and benarc's nostr dot com contain spyware that deliberately send your ip address and browsing history to certain VC (bad guys imho), without gaining user consent. I try to raise awareness of this, but there is very little action, sadly. Nostr needs to develop good reputations for those that respect privacy. Most currently do not. Sadly.

Avatar
steepdawn974 1y ago

Wow I didn't even know that. Really bad.

But in general, the Nostr protocol is just not private, but pseudonymous - and thus succeptible to the same dragnet-style surveillance as Bitcoin. You just need to collect enough metadata..

Avatar
Derek Ross 1y ago

What spyware are you referring to?