#asknostr

How do you prove that a running server/service runs on a certain commit?

In a verifyable manner not requiring trust. Like believing that the written commit hash on the page footer is really the correct commit hash?

#grownostr #dev #service

How do you as a user protect against this?

#asknostr

If you can review the code of a service and verify that exactly that code is running on the service.

Also you can verify that the service stores your content encrypted, and before encrypting it, it does not do scanning or data collection.

Is this enough security and privacy guarantee?

What else can you improve on a custodial solution? So someone hosts a service for you.

#plebchain #grownostr #nostr

Strong opinion loosely held 🤙

Isn't it about making 99 posts with 0 engagement? 😂

"Keep your face always toward the sunshine - and shadows will fall behind you."

--Walt Whitman

I just wanted to take the time to thank you awesome people the good vibes, zaps, likes, comments, discussions, care, you do.

Keep up! I am certain that your life is rewarding you for doing these! 💜

#thankyou #gratitude #grownostr #plebchain

Frens, health, good vibes, hellthreads, good company 🫂

Yes, unfortunately if the server that converts the plain text mails to some encrypted something (an smtp) is not in your control, you have trust involved. And it there is trust, you need reputation to have some "punishment". I would be gladly not having trust though. Maybe the other idea helps a bit, but I have to design that to see how it is possible.

Good morning! ☕️

Choose a life that makes you proud and happy.

That makes you want to get up earlier and to go to sleep later.

Handle others as you want others to handle you.

Be the type of friend that you want your friends to be.

Don't just think, but act!

Thoughts are powerful, but thoughts combined with actions are bulldozers.

#grownostr #plebchain #nostr

This isn't the life godzilla wants for me

#asknostr

Why is it not a standard to pay privately by sending to onchain address with swaps?

#grownostr #nostr #plebchajn

You can swap your lightning sats to an onchain address with https://boltz.exchange/

Random idea:

User can select the smtp service version that it wants to relay its emails with.

This would mean that when user registers, he can verify the code of the different smtp service versions, and select one that fits his needs.

This would basically mean, that he is fully in control which smtp service relays his emails, and it can't be change without his approval.

So it is like installing a software on your computer, and being able to update, or iust opt out.

So no change would be enforcable on the user.

#grownostr #plebchain #nostr #email #privacy

nostr:nevent1qqswe87r0x8w3v2kghmscenv20g2h8u89zjll4ns228u7q2ul3xv9lqpzpmhxue69uhkummnw3ezumt0d5hsygrjdg0zv8xxgar8f6pgtcu4rvamzwd7nfmn6xk0f8wgdrdcvxsuzypsgqqqqqqsepxldh

Let's talk about #email #privacy

1️⃣ You send and receive emails with end to end encryption e.g.:PGP

2️⃣ You host a service that stores your emails encrypted.

3️⃣ You use a service that stores your emails encrypted.

The 3️⃣rd requires trust, the 2️⃣nd requires effort, the 1️⃣st requires effort from other people.

So basically, you can't enforce 1️⃣, only that you don't use emails for private information. Might work, might not.

You can either make 1️⃣ easier for others so they opt in, or you stuck with 2️⃣ and 3️⃣.

#grownostr #plebchain #nostr

Definitely. Alias is for increasing privacy, so we need strong guarantees.

The current plan for increasing privacy:

1️⃣ Open-source, so you can verify the code

2️⃣ Emails are stored as Private DMs, so encrypted

3️⃣ Your data is stored on nostr, so you can anytime move

I see 2 biggest problems now:

1️⃣ Smtp receives the emails in plain text

2️⃣ If your private key is compromised, your email history is compromised

The 2️⃣nd is a general nostr problem, so probably we get to use a solution, or I will think about one, if the base is ready.

The 1️⃣st seems kind of the toughest on the trust side, because you have to trust the smtp server relaying your mails onto nostr. As the rest is already happening behind private messaging/data storage on nostr.

I want to solve first the 1️⃣st problem.

Until that, if I release, source code can be verified, and smtp code will be small, so easy to verify.

Also I don't plan to read/associate or scan emails. This means spam filtering has to be solved on the user side, as usual on nostr. And because smtp code will be small, it will be easy for you to verify that no reading or so happening there.

But I want to minimize the trust further, but not yet know how. Maybe somehow I shall host the smtp servers for the users, therefore, they always control how their emails are relayed.

✅️ Day 43 of #100pushups

Push ups: 35/35/30 (Half pushup)

Other: 45/45/10 sit ups (full)

1 min break in between.

#postr (Push ups and Other Stuff Transmitted by Relays)

#grownostr #plebchain #nostr #100aDayUntil100k

What is your focus there?

So for you, it is important that the alias is reasonable. Anything else that you find important?

So you would be interested in this project to have a simple nostr mailbox basically, where you can create a nice email address, and can share it with anyone, but your emails would be stored encrypted over nostr.

In short: It is service to create yourself email aliases that will send you the email via nostr DM, and has an email UI where you can see them in an "email way".