Replying to Avatar ciori

So basically the HTTPS encryption is based not on certificates but on nostr keys? Therefore the relay cannot see the content of the connection?
Avatar
calle 1y ago 💬 1

It's normal https based on SSL. Otherwise it wouldn't work with anything other than custom software.

Reply to this note

Please Login to reply.

Discussion

Avatar
ciori 1y ago

So you still need to use certificates and be bound to certificate authorities, unless you use a self signed one and trust it?

So basically this is "only" (I mean it's a lot) an alternative way to reach a web site? And does the website still need to have a public IP or is the NWS component "pulling" the connection from the relay somehow?

Avatar
Brunswick 1y ago 💬 2

Obviously the browser will complain about the hostname not matching the certificate.

Avatar
calle 1y ago

It will match the hostname: you visit google.com, you get google's cert, but the traffic goes over nostr (through a socks proxy).

Avatar
Brunswick 1y ago

I'm refering to the nprofile hostname