in fact its mostly by pubkeys because most relays cannot tell what youre doing on your connection, its all websocket messages.