Just imagine that any oppositionist of the government has a Nostr account. In this case, it is enough for the authorities to put in Login his well-known key, go in and see all the keys (nostr accounts) of those who wrote to him personally in correspondence. Next, it is a matter of technique to calculate the IP addresses of those who wrote to him. Especially if you deploy a network of fake relays in order to collect data.
If anyone wants to personally check - go to https://snort.social/, click "Login" and specify any npub* key - you will see everything as the owner of the public key would see, except that you will not be able to read the text of personal correspondence with anyone. It's not very nice to find out about it ;-/
Discussion
No replies yet.