Do we need a name for fediverse+bluesky+nostr+others?

Something *verse maybe the multiverse or since it’s not the thing but about the thing the metaverse?

nostr:note1l8zpd3f98ydsuqwmrz2xr3fjuher09hneu3aktq68vl5alcmusrsp5ehaa

Anyone can screenshot anything that is visible. Encryption doesn't protect against that. But

1. People cannot verify screenshots. They can't decrypt by themselves.

2. It also protects who has permission to write in the group. Imagine syncing a presidential campaign via chat where only the top aides can write.

3. MLS reduces the cost of distribution of messages from having to encrypt to each receiver to just going down a tree of keys. The benefits is on reducing that traffic.

It takes time to get MLS pilled. We have been looking at it for months now.

what's the point of encryption in such a large group?

I now really want to see an MLS-inspired large-group-chat (>100,000 people in the same group) end-to-end encryption scheme through Nostr.

That would be awesome.

I'm just starting to research this more, but I've got a #Nostr question pertaining to private keys and security.

As a best practice, it seems like we don't want people to use their NSec to log into a bunch of different clients. Instead, it seems a more favored practice these days is to delegate something to do your signing for you, like the Alby browser extension.

The user experience is pretty good, and it seems like the current wisdom is to use the browser or a mobile client for this, instead of storing it on a server. My general inquiry is, how secure is this? Is this the best way to do things?

On the #Fediverse side of things, it's more common to see OAuth for client auth. Of course, that all relies on servers, and goes a bit against a peer-to-peer model.

I'm curious as to whether a hybrid approach is possible, or even makes sense: allowing users to tether themselves to some kind of identity provider that more or less does delegated key rotation and some kind of Auth dance for them?

I think about this a lot

What's better to detect impersonators?

Private names: you can change everybody's name to something only you know. You will need to remember the name you like to use. (Like using "Mom" instead of your mom's first name)

Minidenticons: an additional icon that is assembled from the user's pubkey. A different pubkey will be a different icon. You will need to remember the icon associated with each key.

?jwt=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.ewNo3cfDzNhuzzGNVXEdJfFERGkrMZMR0ntvPmRTq7w

There are bots on nostr who grab all tokens immediatelly, don't feed them 😉 use QR codes or add random emojis to the tokens to defend

I feel sad for all the people who recommend Bitcoin wallets and Nostr clients to friends and family very enthusiastically over the years only to have these things blow up in their faces every single time.

I feel sad for all the people who recommend Bitcoin wallets and Nostr clients to friends and family very enthusiastically over the years only to have these things blow up in their faces every single time.

Which ones?

Now you are become Nip, destroyer of worlds.

I can't understand what this is even after clicking.

The last barrier has fallen. Humans are obsolete.