Replying to Avatar hodlbod

What are we going to do to get nostr off of the centralized DNS/TLS system? I tried i2p yesterday and the UX is awful, although it's a neat idea. What else?
Avatar
Vitor Pamplona 1y ago

Start with IPs in a replaceable event instead of fixed urls on each signed event. That's already a huge step.

Reply to this note

Please Login to reply.

Discussion

Avatar
Carman 1y ago

Can't do https with raw ips normally

Avatar
Vitor Pamplona 1y ago

You can. Just register the IP on the SSL certificate instead of the domain name.

Avatar
hodlbod 1y ago

Certs are centralized too

Avatar
Vitor Pamplona 1y ago

Yep, but one step at the time.

Avatar
Ademan 1y ago

Add a fragment identifier to the relay urls containing the cert fingerprint? Like this: "wss://69.69.69.69/endpoint #fp =" ?

Pretty sure you can trust the event for the cert fingerprint, if it's wrong you'll just fail to reply or fetch related events.

In fact, does TLS between client and relay really just amount to MITM protection for privacy+censorship resistance?

Avatar
Diacone Frost 1y ago

I know that you like IPs, but DNS has nice features too, like (geo) balancing.

I repeat myself, but I find the whole process of IP assignment as much bigger problem. It's kindof central by design ...