Nostr Web Client

Here we goooooooo!

https://techcrunch.com/2025/08/29/mastodon-says-it-doesnt-have-the-means-to-comply-with-age-verification-laws/

I think Nostr is uniquely immune to these laws … because accounts and content (can be) 💯controlled by users and because individual services are able to be distributed across many apps.

Social apps can start by offloading key generation and management to designated apps that do only this, and nothing else.

SECTION 2.a > “Digital service" means a website, an application, a program, or software that collects or processes personal identifying information with Internet connectivity.”

SECTION 4.1 > “A digital service provider may not enter into an agreement with a person to CREATE AN ACCOUNT with a digital service unless the person has registered the person's age with the digital service provider.”

https://legiscan.com/MS/text/HB1126/id/2988284

nostr:nevent1qqsfpje763vcn80zq4udwwdfpn5sher48lspr3yctyxkf7l6a0sjjaqzyr0k07d8usgj2azuheavl0wdqd530qxxg00hhtts7hfppredflpqqqcyqqqqqqgpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxge97y6j

Reply to this note

Please Login to reply.

Discussion

Dr. Hax 4mo ago

These are two fantastuc loopholes. Nice find.

It's amazing what you discover when you t

read the law/regulations directly instead of reading articles and summeries instead!

ManiMe 4mo ago

Nostr is different. 👀

Constant 4mo ago

Keypairs are not accounts to begin with. I dont think its fair to put Nostr clients under 'digital service' either, because clients are tools, not a service provided. All these things just assume server oriented architectures.

Not sure if these people understand this though. Relays on the other hand might face issues, but keeping them small might help in practice.

ManiMe 4mo ago

Now I’m no lawyer (I hope to hire one though … ) but it looks like Mississippi law is gonna disagree with you about “nostr clients”.

I’d wager that their definition of a “digital service”, as one that “collects or processes personal identifying information”, is gonna encompass any Nostr client that sends events to relays. The term “processor” has special legal meaning in this context, as does “controller”.

Nostr’s architecture lends itself well to separation of concern, allowing apps to perform discrete services on behalf of “user controllers”. Because events are signed by user held keys (and thereby “immutable”) relays simply storing events would not be considered controllers or processors. But I’m sure regulators will find other ways to regulate, if they wish.

Constant 4mo ago

But relays do access management on the content though, be it implicit or explicit via NIP-42. So why would they not be controllers?

Anyway, all of this stuff is very tiresome. I honestly believe that the underlying problems/issues that cause these stupid laws everywhere can be adressed by Nostr in actuall practical ways.

Atleast, that is assuming these laws atleast have the intent to solve problems and not just be an excuse for controll. In any case Nostr fixes that problem as well

https://youtu.be/lCEQ-VHlojk .

ManiMe 4mo ago

And yes. Key pairs are not accounts. Nice point. 💜