Nostr Web Client

Are you using the new feature Alby has in their browser extension to automatically sign reasonable kinds? I haven't opted in to this because 1) it wasn't clear to me what it included, and 2) after digging into it, there are a few types I don't want to automatically sign due to nefarious nostr client implementations

Alby's reasonable kinds are as follows

0, // Update profile

1, // Short text note

3, // Update follow list

4, // Encrypted direct messages

7, // Reaction

9734, // Zap request

10002, // Relay list metadata

22242, // Client relay authentication

30023, // Long-form content

30008, // Manage profile badges

30009, // Badge definition

and defined here

https://github.com/getAlby/lightning-browser-extension/blob/master/src/extension/background-script/actions/nostr/enable.ts#L94

#grownostr #dev #foss #alby

Bill Monroe 1y ago

Are there specific nefarious client implementations you are referring to or just the potential?

Reply to this note

Please Login to reply.

Discussion

Nice and Kind Vic 1y ago

I don't know if Primal is still guilty of it, but for some time they relied on their stale data for your follow list. If you were following people elsewhere, checked primal, and tried to follow someone there, you could easily lose months and hundreds of people you were following before.