Okay okay.

Just realized that you could brute-force list discovery by just trying to AUTH with any active npub.

Reply to this note

Please Login to reply.

Discussion

yes, "privacy protected" means that every user is an entry point