This is how I get NIP-05 verified with nginx:
```nginx
location /.well-known/nostr.json {
return 200 '{"names": {"sommerfeld": "d0debf9fb12def81f43d7c69429bb784812ac1e4d2d53a202db6aac7ea4b466c"}}';
default_type application/json;
add_header Access-Control-Allow-Origin *;
}
```
this is precisely what I'm doing :)
by the way; your note breaks the astral.ninja reply button lol
cc: #[3]
had to use damus web to reply to him; for some reason #[1] breaks the reply/quote/repost/embed buttons
It breaks for me as well 🤣
damus web is back online? 👀
nah just a local build cloned from Thomas' repo. Not production.
Can't you still be XSS'ed even from a local webapp if the malicious scripts phone home your private key?
oops thanks for the ping adding to the bug list
