Replying to Avatar Vitor Pamplona

Start with IPs in a replaceable event instead of fixed urls on each signed event. That's already a huge step.
Avatar
Carman 1y ago

Can't do https with raw ips normally

Reply to this note

Please Login to reply.

Discussion

Avatar
Vitor Pamplona 1y ago

You can. Just register the IP on the SSL certificate instead of the domain name.

Avatar
hodlbod 1y ago

Certs are centralized too

Avatar
Vitor Pamplona 1y ago

Yep, but one step at the time.

Avatar
Ademan 1y ago

Add a fragment identifier to the relay urls containing the cert fingerprint? Like this: "wss://69.69.69.69/endpoint #fp =" ?

Pretty sure you can trust the event for the cert fingerprint, if it's wrong you'll just fail to reply or fetch related events.

In fact, does TLS between client and relay really just amount to MITM protection for privacy+censorship resistance?