Subnostr

This is how I get NIP-05 verified with nginx:

```nginx

location /.well-known/nostr.json {

return 200 '{"names": {"sommerfeld": "d0debf9fb12def81f43d7c69429bb784812ac1e4d2d53a202db6aac7ea4b466c"}}';

default_type application/json;

add_header Access-Control-Allow-Origin *;

}

```

this is precisely what I'm doing :)

by the way; your note breaks the astral.ninja reply button lol

Please Login to reply.

cc: #[3]

had to use damus web to reply to him; for some reason #[1] breaks the reply/quote/repost/embed buttons

It breaks for me as well 🤣

damus web is back online? 👀

nah just a local build cloned from Thomas' repo. Not production.

Can't you still be XSS'ed even from a local webapp if the malicious scripts phone home your private key?

yes. which is why I'm authenticating with alby and disabled the 'dont show again option'.

I need to authorize every single action.

not perfect, but good enough for testing

I don't remember damus web supporting alby signing, nice to know.

it does, seamless just like astral. :D

oops thanks for the ping adding to the bug list