Nostr Web Client

Nostr is NOT business friendly.

I aim to address this by offering tools and services for building hybrid “Nostr adjacent” clients, allowing businesses to coexist with freedom tech and even thrive together.

- Configurable Webs of Trust algos for audiences discovery and conversion.

- WoT powered standard APIs for exposing content to Nostr (and other business apps) from within a “black box” business app.

- HTTP AUTH integration on ALL business apps, allows users to create local content WITHOUT signatures or private users accounts.

- Frost powered “login“ for ALL business apps, allowing users to paste “disposable” nsecs into proprietary clients without fear of it being compromised.

- Support for “incremental” (and voluntary) adoption of freedom tech into existing business apps, with easy off-ramps for businesses to transfer more and more siloed data onto the “public” network.

These and “other stuff” are on my mind as I read this article by nostr:npub1dtgg8yk3h23ldlm6jsy79tz723p4sun9mz62tqwxqe7c363szkzqm8up6m

nostr:nevent1qqsgdemg0rujdlv3fhpjgwj7je9cdzytnxfar97se0zg83ff2eqlkeszyp4dpquj6xa28ahl022qnc4vte2yxkrjvhvtffvpccr8mz82xq2cgqcyqqqqqqgprpmhxue69uhhqun9d45h2mfwwpexjmtpdshxuet52afmyq

Reply to this note

Please Login to reply.

Discussion

franzap 9mo ago

Thoughts on nostr:nprofile1qqstq4j6pk2sgaupru6l7ah9nq0dueafq356jllwcy7uzlek9yx7hlspz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshsz9mhwden5te0wfjkccte9ehx7um5wghxyctwvshs4kprv3 WoT tools?

ManiMe 9mo ago

nostr:npub1u5njm6g5h5cpw4wy8xugu62e5s7f6fnysv0sj0z3a8rengt2zqhsxrldq3 and I have discussed this a bit. We do prefer the GrapeRank for its extensibility … but in the end diversity is our strength.

https://github.com/Pretty-Good-Freedom-Tech/graperank-nodejs

ManiMe 9mo ago

But at least we’re on the same page re: explicit trust attestations. #bikeshed 💜

david 9mo ago

In the back of my mind I’d like to write a long form post on the thought process that everyone in nostr eventually walks down when considering the question: where does the trust signal come from? At first we think follows provides the best signal, then we change our minds and think the best signal should come from explicit trust attestations, then we realize the signal comes from lots of directions and we need to figure out how to interpret it no matter where the signal comes from. Which is much more tractable than it sounds.

franzap 9mo ago

Totally agree with a stronger trust signal, the question is how to gather it in the real world. Do you have a plan for that?

ManiMe 9mo ago

We do. It’s called GrapeRank. It has a pluggable architecture to normalize “interpretations” of content and users from any source. Pluggable interpretations is the plan! 💯

franzap 9mo ago

You mean using sentiment analysis, zaps? Example?

david 9mo ago

The idea is that we have no choice but to use the data that is available to us. We go where the signal is. Different people will have different ideas on that.

Example: if you trust zaps more than anything else, someone (a dev) will need to write a (relatively simple) script that transforms zaps into a format that is ready to be consumed by your GrapeRank calculation engine. Perhaps unsurprisingly, that format resembles an explicit trust attestation; it has a rating, a confidence, and a context. The format that my WoT engine employs may or may not be identical to the format that yours employs.

I’m not sure what you mean by sentiment analysis, but whatever it is, you or some other dev would write a script to consume raw data (nostr events) and spit out data ready to be utilized by GrapeRank. If it’s a good signal then you could share the “interpretation” script with other users.

Hopefully that makes sense … let me know if it doesn’t!

ManiMe 9mo ago

Yup. What David said. … but even easier.

Here’s an example of the API (wip) which we use to create Nostr interpretations. These ones are pretty simple… but the ‘interpret’ callback is where you’d call your content analysis function.

https://github.com/Pretty-Good-Freedom-Tech/graperank-nodejs/blob/main/src/Interpreter/Nostr/index.ts

david 9mo ago

Are any other clients consuming your personalized trust scores using your WoT DVM spec? I really want to see that happen. Do we need to make some noise so devs know this option exists? Talk about it on a pod maybe?

il_lost_ 9mo ago

i saw a bug nostr:nevent1qvzqqqqqqypzqkfzjh8jkzd8l9247sadku6vhm52snhgjtknlyeku6sfkeqn5rdeqyg8wumn8ghj7mn0wd68ytnddakj7qghwaehxw309ahx7um5wgh8xarpddjhjtnwv46z7qpqqqpgnn67q0qa2s98ts5u8e8qmu8kkur7k2v0lnu56875mzfyfjkse5lwfa

franzap 9mo ago

Sorry what is the bug here?

il_lost_ 9mo ago

it's not a bug, I thought top followers should lead you to discover relevant people, but it closes the loop too soon

franzap 9mo ago

It's using Global Pagerank because it's public, signed out access. If you tried Personalized Pagerank via DVMs you'd see the world from your own perspective.

Also, Vertex has a recommendation DVM you can use to find new people (high rank profiles you don't follow)

il_lost_ 9mo ago

when will you be able to log in then, is this something you've been thinking about doing? Or is there somewhere else you can use like datamachine or dvmdash in the future.

I don't know why you used new kind,

5313 could be 5301,

5315 can be 5303

franzap 9mo ago

nostr:nprofile1qqs0dqlgwq6l0t20gnstnr8mm9fhu9j9t2fv6wxwl3xtx8dh24l4auspz4mhxue69uhkzat5dqhxummnw3erztnrdaksz9nhwden5te0d4kx26m49eex2ctv0yhxcmmv9uq3gamnwvaz7tmjv4kxz7fwv3sk6atn9e5k7dj6rpa

ChipTuner 9mo ago

I haven't had much time to work on the blocking issues with NVault, but it's purpose (although not explicitly stated yet) is going to be a corporate focused system. Managing credentials and ACls for corporate users and accounts. It will have standard integration with corporate authentication (OIDC only right now, but probably ldap and AD) and allow administrators control over what their employees have access to, which apps, "privacy policy" not filtering, team based keys. Ideally redundant software, hardware and network-based signing device support, all handled from central servers.

https://www.vaughnnugent.com/resources/software/modules/nvault

Garbage nsec 9mo ago

This is great to read, I'm of the mind that unlocking AD in this way will do far, far more for the growth of Nostr as a protocol than any Instagram or Tiktok clone ever could, much respect.

ChipTuner 9mo ago

Yeah man corporate won't change for anyone lol so if we want to integrate we have to make it work IMO.

ManiMe 9mo ago

Chip, as you describe, nvault solves yet another real world need for business interacting with Nostr. Adding to my list above :

- secure usage of “master” business nsecs, in an environment where “authorized” use of such keys will change over time.

👀