i don't know how many of you use tor for browsing internet, i found very scary the kind of control cloudflare h as all over domains .. that probably will become i new way to censorship that will block in most advances way they do today

The servers that compose the fedimints have hard-coded domain names and one of the XYZ domain names got rugged by the registrar, hobbling the mint's ability to complete lightning transactions. Due to the DNS vulnerability, all fedimints are turned off(?) while it gets fixed.

You can't even follow simple instructions and setup your nostr profile correctly. You shouldn't be giving any advice on technology ever.

Thanks. I thought about it.

For Simplex, what happen if the others send me some spam mails.I can shut down that link??

yea the guy who runs the cachu mint can at any time choose to shut down and run away with all the Bitcoin.

Lots of hype around cashu atm (pun intended) even though it is a highly centralized and hence rug prone solution.

I wonder if the way forward is a WoT approach or federated solutions like Fedimint or something else?

#asknostr

#ecash

#devs

I mean centralized as in 'single point of failure'. If the mint goes down your ecash is worthless.

there is also the problem of encryption, the naive approach puts too much load on the main key that may be stored on a TPM or similar for security

session keys should be established, but at that point you are reinventing TLS and may as well publish unencrypted packets

another problem is overhead: from base64 encoding binary data to having things like WS and 2 reliable transmission stacks

and in the end relays are just a rendezvous point for client/server, and there are already solutions like TURN

for privacy benefits you can use the already actively developed project I2P, and there is no advantage to NWS

goals:

- use existing client software

- use existing server software

- server uses https

- server can be behind a firewall or NAT

- server doesn't have DNS

- server doesn't have IP reachable externally

- if possible, require no additional client software

- client only knows the server's nprofile (npub + relays)

- make them talk to each other

For anyone looking for a comparison to TOR, as far as I understand it:

It’s comparable to the TOR hidden services that can be reached by onion addresses. Here we have the nostr npub to address a service.

Since both entry and exit node only connect to relays, they are the only part that needs to be publicly reachable. Services can run behind firewalls on machines that are not reachable from the outside.

But it’s not like TOR in term of being an anonymous browsing tool for any website. It’s (currently) only for exposing a single service in a censorship resistant way.

This isn't great for privacy. Tor is much better and safer.

What's cool about this is that you can host web applications without a domain or public IP and the fact that clients can use this without additional software if they can talk to nostr, or a simple socks5 proxy if they can't.

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

Why don't we do BIP353 for nostr pubkey domain lookups?

It's like NIP5 but without needing a server...

Monero predates your 2015-17 era.

Long term, we need private money or it just gets traced / taxed / seized by the state anyway.

But truly private money makes for a bad store of value. You can’t audit the ledger, so a bug could create unlimited inflation that would be hard to detect.

So privacy is how you move money, not necessarily store it.

I want to move 1 BTC privately without storing or getting rugged. What are the possible options?