He's right.
Everyone acts like this doesn't matter, but privacy is important, even in an open protocol.
nostr:note1ryy2mv3yfpkv0qcxy0fg3h5n0uy2dgqfsk7vu9pl665mwazwmdcqmuffk6
Discussion
Nostr needs to evolve into a better form. But I think it can and will.
We are still very early. Some of the products look very polished, and that hides the immaturity of the underlying concept.
People expect too much, at this point, sometimes. They're confused by how snazzy some of the interfaces look, I think.
Very true, I underestimated the time required to even build a small library, let alone the full stack signing app I've been building. I have way more time than most devs too (less experience). It's come so far in a short time, but as usual when you look under the hood you can see how glued most applications are.
To think most apps were built in spare time, without funding, nostr is one of the most exciting and impressive environments I've been around.
Yes, the big funding showed up, later. Hodlbod and Fiatjaf and co. were here before the funding.
It's clear that some of the older libraries were built at a time when they had no idea how big and complex their running environment would eventually be.
We're coming in later and building with a view of massive expansion and diversification of use cases. Need other tools and architecture for that, but that's what we're used to from our employers. Different kinds of software devs are arriving now, as the protocol matures, but it's still very early.
Yup.
But I also think that's an indictment of how trash most software is. That irks me to no end.
It's rapid prototypes that became products.
Many with no idea how to turn into better products.
They often do know, but they're under extreme pressure to deliver features. Refactoring too long or even 😱 changing to a lower-level tech stack will get you eaten by the Nostr Mob.
I'm done complaining about low product quality because I better-understand the way the market here works and we can build a better copy later.
Gotcha.
At some point, you've got to tell _someone_ *some* IP if you want to connect with them peer to peer. And at the end of the day, nearly all of our packets should be p2p.
Ideally you would just tell the _desired peer_ your IP, but that implies you know theirs, and if you did you wouldn't be in this place to begin with. So you've got to at least trust some kind of gateway/name resolver/discovery node.
One decent solution is for every peer on the network to defacto run a personal proxy in the cloud. The proxy IP is not sensitive, and your connection with it is encrypted and doesn't expose your personal IP. People discover "you" on a gateway by finding your proxy IP, instead of your home IP.