I think a weird UX piece for end users will be - is this login as in share my pubkey, or login as prove I control the private key.
It’s perhaps subtle, however we may need better nomenclature.
May things may just need air know how to present your view (impersonate?) - load your relays, profile details, contacts, etc.
Others may also want to create events (authorise) on your behalf, like add a contact or create file event. It’s more on-demand.
And others again, may need you to prove (authenticate) initially, and then optionally allow other creation too (authorise).
Sometimes an extension controls what can be signed (like which event kinds), sometimes a client app will have soft fails or hard fails if you deny access.
It all needs massaging..
Many masters is the append only log alternative trade off.
I suspect we can create some kind of head event that’s reliably accessible and able to keep a cursor/pointer. More likely a p2p layer.
Well, to be fair he is trusting an inaccurate graph - stupidly.
A major factor is how relays have gotten better at spam and flooding mitigation. But old data often isn’t cleansed.
Certainly two major spikes and currently consolidation, transitioning into incremental growth at present.
We have a few search engines out there, and a NIP search spec. It’s early in the adoption curve by apps and providers.
#[4] #[5] #[6]
Nos Social app by #[7] has a discovery tab seeking a diversified content view.
NIP: https://github.com/nostr-protocol/nips/blob/master/50.md
I’ll send you a DM.
I’ve seen early hints of this. Posts about permaculture and horse poo, more and more about cooking and food, travel and outdoors is growing too. Lots of new languages than six months ago too.
I expect once we get a few passionate accounts in each area, that continue to share, their following will grow and Nostr diversify. I’ve noticed people even mentioning now as the best time to grow as a future top following for that content - there is definitely interest in building communities here.
I’m with you. Can always be a hot fix or improvement later if issue.
Security is just very hard. And state based actors and centralised services (even CDNs) are a real threat going forward.
Be nice if we can eliminate risk from day one.
Yep. Just a POST /auth or /login endpoint would work.
Client side session management can be tricky, as your can’t remotely kill/expire a user/device session. Nostr is a little different as your can’t exactly log out an apps/device’s access to a private key. I suspect if suspicious activity was detected you would flag/freeze that pubkey - however then how would you contact someone if pubkey maybe compromised.
I don’t know if some kind of cross-site scripting protection is needed. I’d have to think - however the relay AUTH nip includes a unique server/relay challenge code the event needs to include.
Cool, looks like it does. Likely the shipping zones need to support a price table or excluded list.
And also you can’t pay 0 BTC, so the checkout gets stuck on the payment QR when it’s a free item.
I know. I haven’t looked at the code yet.. but seems pretty impressive. Polish some UI and hopefully add lightning, and I can see people starting to sell.
Is this a cryptic announcement that you’ve joined SpaceX?
If you haven’t seen it yet, this is also great. POC Nostr based Uber. I actually built the same thing as a POC a year ago.. but this was better.
I still can’t seem to find his pubkey.
NIP-98 HTTP Auth. I love this! Thanks nostr:npub1v0lxxxxutpvrelsksy8cdhgfux9l6a42hsj2qzquu2zk7vc9qnkszrqj49 !!
CC #[3]
I’m not sure my use cases need a signed event per request, however it does maybe kill session cookies - but I still need to cache some local state like profile event and stuff anyway.
Don’t worry, I’m not famous either.. and much more fame and I’ll have to go underground 😉
Yep. A limitation I see today is it doesn’t use support lightning for payment.
There may be a way to support Lightning easily enough.. so hopefully that means no mempool and lower, more consistent fees.
You can share the suggestion with the author. It’s early, but if people want to use it, no doubt ideas can help prioritise a roadmap.
Set you up. https://nostrgraph.net/dashboard
Yep. GitHub link and demo link. I’m not the creator.. haven’t been able to find their pubkey.
Find some more people to follow. Post some content. Reply to others. Pick some other relays to join, or try a paid relay if you see to much spam. Add your lightning address, so others can ZAP you p2p payments.