Fellow strudelers, I decided that since I've been using nostrudel.ninja more and more, to audit the code for signature verification (as I have done previously with ALL clients I use, and even some that I don't use).
I found that It does have signature verification, however, it is turned off by default. I highly recommend changing the setting under performance, and as far as I can tell, it's still very fast. In fact, I can't even tell the difference in speed.
Signature verification is the backbone of nostr. It is tempting for clients to turn it off and so it's good to check that this is not skipped on purpose or on accident. nostr:npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknpr may be able to chime in on why it's off by default.
As you can see in the code here, the signature check is skipped if the application setting is unset.
Settings page to turn it on is under "performance" here:
Once turned on, you will see a green check box on each message. That means it's been verified.
Enjoy!
Strudeler update:
Confirmed that signature checks are skipped for all events. The setting I described only verifies notes after the fact, not metadata, follows or relay lists.
Hzrd says he's working on it in the next version.
Zap him some sats of encouragement. It's a great client, but keep in mind it's very fast right now because it's skipping verification.
