Replying to Avatar daniele

Coracle and Voyage have WoT, for sure.

Many personal relays offer WoT.

nostr:npub1kpt95rv4q3mcz8e4lamwtxq7men6jprf49l7asfac9lnv2gda0lqdknhmz is working on Pagerank, via DVM.

Other clients, like Gossip, have other antispam strategies (NIP-05 check, first-seen check, etc).

I use many clients with my WoT relay (https://github.com/dtonon/chronicle) and I barely see any spam.

A famous profile that want to start with Nostr should have (minimal) resources to set up a good enviroment.

The only issue I have with some many of the current methods of combating bots and spam is that there isn't any way to differentiate a brand new user from a bot, so it adversely affects new users, too.

It's not terribly difficult to break through this. You just have to know someone who is on Nostr already and ask them to follow you via some other means of communicating with them. But if you don't know that you need to do this in order to bootstrap into not being considered a bot by everyone's WoT relays and Pagerang filters, then you'll just be shouting into the void and wondering why no one ever sees it.

Reply to this note

Please Login to reply.

Discussion

WoT is a first effective tool but, being potentially too restrictive, is not the final, perfect measure.

Even if you are introduced by someone this doesn't help if you want interact to with another group with whom you share no contacts.

Ideally you should pair WoT with other checks, like PoW, NIP+05 verification, content analysis, the account creation date (via OTS), and use them to increase a "real user" score value.

In addition clients should think the visualization as a spectrum, for example totally hiding events from abusive npubs (high post frequency, duplicated messages, etc), but merely compacting uncertain ones, so that the user can easily check and eventually whitelist them.

#nostrdesign

I believe the simplest and most effective single solution beyond WoT is proof of membership in a trusted community.

cc nostr:nprofile1qqs2js6wu9j76qdjs6lvlsnhrmchqhf4xlg9rvu89zyf3nqq6hygt0spzemhxue69uhku6t9dshxummnw3erztnrdakj7qg3waehxw309ahx7um5wgh8w6twv5hsvjwfzm

Yup, #communikeys integrate best with this.

They can ask for payment (to write) most easily (alleviating the need to filter with social graphs).

They can follow / label the npubs they interact with (as a high signal profile in the social graph).

But mostly, they are king over their own community and their whole value-add = moderation (filtering for high signal content, profiles, ...).

Entering via a community you "trust" is immediately having a reference base. F.e. Anyone with the same name, image etc as someone in the communities you're in → can be labeled as a potential scammer. Etc...

It's an interesting option.

But, also communities can be built in an entirely synthetic way, so if you want to use them as a proxy to prove that a user is real, you should also verify that they are legitimate. And so we go back to WoT.

Yup, we're building on community / private group invites as the main entry point. For that and many other reasons.

yes exactly, but the community already exists in the social graph. 99% of people will be invited to communities, won't be their founders. Founders will need to acquire reputation themselves, but these are the type of people that aren't afraid of doing the work.

Make sense, the founder improves his own WoT, the community mirror it and so the members benefit from it.

But the community have to be closed with strong gates, like invitation-only, payment, or very heavy PoW.

And it's not easy to verify these conditions in a programmatic way.

Let's see how things evolve.

I see this evolve towards #communikeys labeling their active members in an open way. So that the apps they use can easily pull that data.