My JSON is on a domain that is my real name, and has an SSL certificate from a browser trusted CA in my own country.

My nostr pubkey is mathematically tied to my real legal identity.

Can an institution fraud this, eg falsely certify a trojan? Yeah, but not legally.

So I can agree a contract with someone on nostr and it could in theory be upheld in common law.

Pros and cons to both self identifying and being anon. Can you trust nyms? Sure, but it takes time and effort to earn trust, and I’m a pragmatist and everyone has their own risk profile/appetite to manage.