On a serious note, the "Tesla" and "YouTube" accounts that were just registered on NostrPlebs.com may be a violation of our Terms of Service. We do not allow impersonation. That said, if Telsa or YouTube would join Nostr, they would use their own domain names for recognition. So, my question to my fellow Nostriches, is this actually impersonation? I appreciate you thoughts on this.
Discussion
Do you have a way to request verification?
What is verification though? NIP-05 is NOT verification. NIP-05 is only an identifier. It's an online or digital identity according to the official spec.
Maybe a different approach for brands?
If you have it in your TOS that you don’t permit impersonation there’s got to be a way to confirm they are or are not
If someone were to use your name and your profile picture and register alanajoy@nostrplebs.com, then that would be a clear case of attempted impersonation. We would contact you and ask if you were trying to secure your name on our service. If you said no, we would suspend the ID. Are you suggesting that I should email the media contact at these companies and ask them if they are or are not trying to secure these names? Or would the correct path here be to wait until they would contact me about impersonation?
What if it were already taken on nostrplebs and they were to register it on nostrpurple? What would be the situation there?
but, how many people who identify as alana joy exist in the world. for me, this is definitely a deal with it when it’s an issue thing rather than trying to preempt it now.
I don’t think you should attempt to email YouTube/Tesla, more like request proof of company association from the user who registered with Nostr Plebs. Alternatively, you accept it and if/when you’re contacted by YouTube/Tesla you address it then. Though even then you’d need a way to request legitimacy.
Any company trying to verify themselves should just use their own domain…
Anyone can make a new keypair and buy a NIP-05. I can make Youtube@Nostr-Check.com right now on my domain and link it to a keypair. Doesn't proof it's actually YouTube.
I'd be impressed if I see a keypair with Elon@Tesla.com actually working.
Right. NIP-05 is just an identifier. At least it prevents bot action, but does not verify a specific person. Could be anyone who has access to a specific domain as well.
Personally, while it seems harmless, I feel that low level impersonation like this could turn into a much bigger problem someday
I mean by purchasing the name they aren't necessarily claiming they are the real company. So not impersonating necessarily. If they do try then different story. Tesla can buy them out if they want to
yep. If the "major brands" want good names here they should hurry the fuck up and get over here.
Otherwise they can go fuck themselves. Guess how many "major brands" have worked to ban me?
Seems so.
No way Tesla or YT isn't gonna roll with their own domains. So yeah, fake.
It's obviously fake, but that's not the point. NIP-05 is not verification. It's only an identifier. If these accounts want to be known as Tesla or YouTube or another brand @nostrsplebs.com would it really be impersonation? Major brands would use their own domain and be identified by their own domain.
Yeah it's a cool way to be part of something. Kinda feels like a fanclub kinda thing, or sportteams.
Your TOS, so you get to make that call 🙂
Most likely, any supposed major brand name that is registered with our service is not the actual brand themselves. In that case, it's just someone's nym. If in the future a brand would contact us and wish to procure their ID, then we'll cross that bridge when we come to it.
I think TBH that all of these matters are "that's a dispute between you and them. Come back when the court rules in your favour." If you take things into your own hands, you could end up being sueable.
Definitely impersonation
I honestly don’t personally classify it as impersonation until an attempt to impersonate occurs.
I honestly think it’s someone who is thinking NIP-05 is the equivalent of a domain name.
I agree with some of the others. It's a gray area where allowing it could cause people to distrust the domain they are associated with.
This is something I had not thought about. I want Nostr Plebs to maintain is strong and well known reputation. While these are obviously jokes and not real, they could lead down a path that we do not want.
Tesla company name is an impersonation. 😀
If they try to represent themselves as Tesla the company, yes. Otherwise, it's a person's name or someone that may want to post Nikola Tesla facts. Most likely, since it's the same person that's buying up NIP-05 IDs, they've bought 8 so far, it's someone that is name squatting 😉 Which is also a violation.
looks legit to me.
Is Tesla a company or a person? But yea I agree with where you’re coming from.
NIP-05 isn't verification. It's essentially an email address. Who owns youtube@proton.me? or tesla@proton.me? This is hard...
There you go. To say it's illegal for anyone to get those without proving they are the real youtube would be crazy. Nip 5 only ever verifies consistency if acting agent
using elon@tesla.com as NIP-05 verification would feel like impersonation if the key wasn’t held at least someone with authorized access to the domain name tesla.com
but on nostrplebs? feels like anyone could create any username they want right?
Right. And it’s impossible to know their intended use simply by the fact that they registered the nip5. What if I wanted to setup a Nostr account to post historical facts and quotes by Nikola Tesla? It would make total sense to use the name Tesla and isn’t impersonating anyone. Or what if the person who registered it is actually named Tesla and they’re just using their own name? 😅 I think clarity on what nip5 is and isn’t, as you obviously have, helps determine how to approach it. More obvious attempts at impersonation may be easier to deal with, like if someone tried to register “nancypelosi@nostrplebs” or something like that.
Agree. Impersonation is more than just registering an ID. It's how the ID is used that matters most.
Easiest approach is for these companies to add a TXT data with a public key on their website domain that matches the one being used here. This way places like iris can verify that they are the owners of that account.
I actually really like this, except the fact that companies would just add their own NIP-05 to their own domain before editing DNS records to make a third-party NIP-05 work.
First come first served! Tesla shoulda been faster
If it’s against your ToS then you need to uphold it
I don't think anyone will be confused by Tesla@NostrPlebs vs Tesla@Tesla.com if that that ever happens.
Agree.
I wouldn’t consider it impersonation. Unless the profile using it is pretending to be the official Tesla
We all have the ability to use our domains. Alleged impersonators don't stand a chance to verify themselves at youtube@youtube.com or tesala@tesla.com. In short, If companies will adopt nostr, they will use their own business domains.
I'd say let them be and take their money :)
Just replace your TOS with: "we will ban accounts without reason or explanation according to our own discretion."
Tesla could be a reference to so many things and YouTube could be a YouTuber.
I would argue that it's going to come down to content of those accounts versus just names. If they break the rules then boot them but until they do, or enough time unused to be considered squatting the account, I say let them have it.
It could be interesting what you do if actual Google reached out wanting to purchase that handle. Do you upend a YouTuber for the owner of the platform? I'd argue you should but I'm sure others would disagree. The Tesla could be an even tougher call.
Overall I think it's good you're thinking about it now and building out a ruleset to go by as this grows.