Nostr Web Client

Great work! Really well put together... I think the only missing part is the marketing...

I only came across it by accident when doom scrolling - and didn't see it on places like nostrapps.com or zapstore.dev?

Also think you need to tell the creators what is better about it (for them) - zaps? decentralised? Whatever..

Maybe look for content creators using Peertube - offer to help repost their content or something... people like nostr:npub1djpadwxx86fxgxnkhtv9h604rh22u65geznfxc3nntry2rz0sjgsj28kck or nostr:npub1sehlkgvpelxmnd0wn7ec0grn9wyzw9gm6805wz8xl0gaw2c0377q4nfsgc

Published new Nostr Community Convention: ncc-06 - NCC-02 / NCC-05 Service Profile

NCC-06 updated: NCC-02 / NCC-05 Service Profile

NCC-06 now formally defines a service participation profile that composes NCC-02 and NCC-05 for identity-first, DNS-optional service discovery.

It specifies what a service, sidecar, and client must do to support:

Pubkey-owned service identity

Deterministic client-side resolution and trust

Dynamic endpoint rotation

Tor and onion services as first-class endpoints

Robust behaviour under partial failure and inconsistent data

NCC-06 does not change underlying protocols, add new message types, or move resolution or trust logic into services. Services remain protocol-dumb. Clients remain in control.

#nostr #ncc-02 #ncc-05 #ncc-06 #service #no-dns #nostrdev

nostr:naddr1qvzqqqr4vgpzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqrxucmr95crvkvmv52

Published new Nostr Community Convention: ncc-05 - Identity-Bound Service Locator Resolution

NCC-05 update published

NCC-05 now clearly defines identity-bound, encrypted service locator resolution for dynamic ip:port endpoints, without DNS or public infrastructure.

What’s new and clarified:

Explicit anchored vs unanchored operating modes

Anchored mode (recommended): NCC-02 provides identity and trust, NCC-05 provides private reachability

Unanchored mode (permitted): supports ephemeral, P2P, and bootstrap use cases

Formalised endpoint object format with deterministic selection

Stronger guidance on TLS key binding (k) to prevent endpoint substitution

Clear TTL, expiration, caching, and refresh semantics

Deterministic record and endpoint selection to improve interoperability

Explicit support for private and invite-only services

NCC-05 remains client-agnostic, relay-agnostic, and fully compatible with existing Nostr primitives, while enabling private, low-cost alternatives to Dynamic DNS.

#nostr #nameresolution #privacy

nostr:naddr1qvzqqqr4vgpzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqrxucmr95cr22rcfga

Published new Nostr Community Convention: ncc-02 - Pubkey-Owned Service Discovery and Trust

NCC-02 — summary of recent changes

Clarified NCC-02 as the identity and trust anchor when used alongside NCC-05. NCC-05 provides reachability; NCC-02 provides meaning, intent, and continuity.

Explicitly documented support for private and invite-only services, including cases where a Service Record intentionally omits a public u endpoint.

Clarified that the absence of u does not invalidate a Service Record and must not be treated as a reason to bypass NCC-02 anchoring.

Strengthened guidance on the k tag for TLS endpoints, recommending transport-level key binding to prevent endpoint substitution, even when DNS and standard Web PKI are in use.

Aligned NCC-02 language with NCC-05 and NCC-06 so clients can cleanly support anchored, private, and dynamic service deployments without special-case behaviour.

#security #nostr #ncc #convention #trust #identity

nostr:naddr1qvzqqqr4vgpzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqrxucmr95crygclq2h

nostr:naddr1qqwksmmh946x7ttswfhk6ur5943x2ar5v4ez6urjda4x2cm5wvpzq0mhp4ja8fmy48zuk5p6uy37vtk8tx9dqdwcxm32sy8nsaa8gkeyqvzqqqr4gu4k8yy6

https://www.npmjs.com/package/ncc-02-js

NCC functional libraries now live on npm 🥳🥂🙌

These are the first functional JavaScript libraries for NCC-02, NCC-05, and NCC-06 are now published on npm and ready for people to give me shit about.... (😭)

- ncc-02-js: Create, publish, and resolve NCC-02 service records. This standardises how a Nostr service describes itself and how clients discover it.

- ncc-05-js: Handle encrypted endpoint records. This enables private and censorship-resistant service addressing without relying on DNS.

- ncc-06-js: Sidecar tooling for managing, publishing, and rotating NCC-02 and NCC-05 records independently of relay core code.

These libraries are deliberately small, explicit, and focused on correctness so they can be dropped into relays, sidecars, or client tooling without ceremony.

npm:

https://www.npmjs.com/package/ncc-05-js

https://www.npmjs.com/package/ncc-06-js

#nostr #ncc #npm #javascript #decentralisation #privacy #censorshipresistance #opensource #nostrdev

Replying to

Sirius

Nostr apps should be served over Nostr, independently of DNS, CAs and host servers. Nostr app env can provide key management, relay connections and event storage without every app having to duplicate. Ideally, this would happen on the browser or even OS level.

nostr:note1205kts0atv8zs275as3hn6ejlscgdlzng63x0pyq8x8c2mry38jqql69j8

https://github.com/imattau/ncc-06

I got a working (tests and toys) version of discovery, authority and resolution using nostr itself ... removes the need for dns and CA.... I think it might help go part of the way

An example #PoC is on #Github -> https://github.com/imattau/ncc-06... Passing most(!) tests.... atm

Service Discovery and reachability - using #Nostr - nostr:naddr1qvzqqqr4gupzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqgx2erzvc6xzve5vdnrvctrx5ur2ym0tw2

Interesting read if your into #nostrdev nostr:naddr1qqgrgdrx8pjngcfnx5enscnrv4jxyq3qwav4fae3gyfy3xj298kxj2mj8phavz7vavps34przq02j7w902qqxpqqqp65wucr7vf

Published new Nostr Community Convention: ncc-06 - NCC-02 / NCC-05 Relay Profile

#nostr #ncc-02 #ncc-05 #relay #dns #nostrdev

nostr:naddr1qvzqqqr4vgpzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqrxucmr95crvkvmv52

Replying to

Derek Ross

I was recently reminded by nostr:nprofile1qyfhwue69uhnzv3h9cczuvpwxyarsvpcxyq32amnwvaz7tmpvanhytnwdaehgu3wd3skueqqyqvfqhg2t43r4wq6nzaf33vzh4040ujsd34cpzg9l3ve6ksty2dss3e99mm of how frustrated I was with vibe coding about eight months ago. I had already spent hundreds of dollars on a project, and it was still full of bugs and half-baked features. The idea was great, but it clearly needed more work, which meant more time and more money. I was close to giving up. I was genuinely close to walking away from vibe coding altogether.

But I’m not a quitter.

I kept going and invested even more, eventually spending around $800 on my first serious project using Goose and Gemini 2.5 Pro. Since then, the tools have improved dramatically. The models are better, faster, and more capable. But more importantly, I got better.

I now see that phase as a learning and teaching experience. I learned how to communicate with AI effectively, how to guide it, correct it, and push it toward better outcomes. I learned the tricks of the trade and how to actually use AI as a real development partner. I kept building and I eventually won. That frustration wasn’t wasted at all. It was the cost of learning how to build in a new way.

lostcause 6d ago 💬 2

💯 agree... I've found another good way is to use multiple AI - as the quite often have different perspectives and approaches.

I've found when 1 gets stuck - pass it over to the next one to take a look. More often than not - it can fix the problem (seems even AI can get stuck in its own head..?)

You can also add in the general GPT to help you explain your thoughts to the coding AI - without wasting development tokens.. 😊

Published new Nostr Community Convention: ncc-05 - Identity-Bound Service Locator Resolution

Also (theoretically) works with NCC-02...

#nostr #nameresolution #privacy

nostr:naddr1qvzqqqr4vgpzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqrxucmr95cr22rcfga

Published new Nostr Community Convention: ncc-02 - Pubkey-Owned Service Discovery and Trust

nb: This is also the first time using the annouce post function of #NCC-Manager...

#security #nostr #ncc #convention #trust #identity

nostr:naddr1qvzqqqr4vgpzpdwnfmku0k8crn42tmfh0ddz656wa9yl4cx94va6uzjhd2n5wh9lqqrxucmr95crygclq2h

https://techlore.tv/static/streaming-playlists/hls/d69ec4ce-7da8-41bf-9923-b86b168ec84a/3b3b3777-692c-4a4e-8fdc-8f93997719c3-1080-fragmented.mp4

VPN Getting Blocked Everywhere? My New Split Setup

By: Techlore

Channel: https://techlore.tv/video-channels/techlore

https://techlore.tv/static/streaming-playlists/hls/d69ec4ce-7da8-41bf-9923-b86b168ec84a/3d88ac9a-ce6a-4f65-a2ac-079bea8a4bbb-master.m3u8

https://techlore.tv/videos/watch/d69ec4ce-7da8-41bf-9923-b86b168ec84a

After years of using system-wide VPNs, I made a switch to browser-only VPN extensions because I was constantly turning off my VPN for banking apps, flight check-ins, and captcha-heavy sites. Here's why browser extensions can be a great middle-ground that offer some protection without the daily frustrations that make you disable your VPN entirely. Techlore empowers individuals with practical digital privacy knowledge, security tools, and advocacy resources. Discover how to protect your online data and regain control of your digital identity.

📱 RESOURCES IN VIDEO:

• Our VPN Chart: https://techlore.tech/vpn

• Proton VPN Kickback Link: https://go.getproton.me/SH1Ip

• Proton VPN Link: https://protonvpn.com/

🔎 RELATED VIDEOS:

• https://youtu.be/wlfnIXL63tw

• https://youtu.be/jNbZrTCM3fs

📺 RELATED CHANNELS:

• Surveillance Report: https://www.youtube.com/@surveillancereport

• Techlore Clips: https://www.youtube.com/@techloreclips

• Surveillance Report Clips: https://www.youtube.com/@surveillanceclips

• Henry's Personal Channel: https://www.youtube.com/@henry-fisher

🔐 TECHLORE RESOURCES:

• Techlore Homepage: https://techlore.tech

• Go Incognito Course: https://techlore.tech/goincognito

• Techlore Forum: https://discuss.techlore.tech

• Exclusive Signal Group: https://discuss.techlore.tech/t/signal-usernames-are-here-join-our-signal-group-techlore/7640

• Recommended Privacy Tools: https://techlore.tech/resources

🧡 KEEP TECHLORE INDEPENDENT:

• Become a Techlorian: https://discuss.techlore.tech/s

• Patreon: https://www.patreon.com/techlore

• YouTube Memberships: https://www.youtube.com/channel/UCs6KfncB4OV6Vug4o_bzijg/join

• Affiliate Links: https://techlore.tech/affiliates

• All Support Methods: https://techlore.tech/support

This content couldn't be freely available without our Techlorians, huge thanks to:

BRIGHTSIDE, Clark, Ente, Larry, Richard, Afonso, JohnnyO, kevin, love your content, x, 3c3c1d, Alexandre, Nadio, NotSure, Philip, Seth, Stephen, Steven

🌐 FIND TECHLORE ELSEWHERE:

• PeerTube: https://techlore.tv

• Mastodon: https://social.lol/@techlore

• Bluesky: https://bsky.app/profile/techlore.tech

• Twitter: https://twitter.com/TechloreInc

• LinkedIn: https://linkedin.com/company/techloreinc

• Telegram Channel: https://t.me/techlorefeed

⏱️ TIMESTAMPS:

00:00 INTRO

00:08 NO MORE SYSTEM VPN!

00:40 THE BREAKING POINT

01:26 THE SOLUTION

02:07 THE DEMO

03:07 THE PROS

04:00 THE CONS

07:02 MINIMIZING THE CONS

09:01 THE OPTIONS

10:46 SO, WHAT SHOULD YOU DO?

12:01 THE BEST SETUP IS...

YouTube Mirror: https://youtu.be/EwgTKdzTELY

https://techlore.tv/static/streaming-playlists/hls/279227c9-2466-47ee-adb9-0b1711419fa3/3af02f3b-8209-49ba-9f75-fa2226af87a4-480-fragmented.mp4

Session Interview: The Decentralized Signal Alternative

By: Techlore

Channel: https://techlore.tv/video-channels/techlore

https://techlore.tv/static/streaming-playlists/hls/279227c9-2466-47ee-adb9-0b1711419fa3/e9ada9ee-a410-4c4b-b63f-726c670a88f3-master.m3u8

https://techlore.tv/videos/watch/279227c9-2466-47ee-adb9-0b1711419fa3

I sat down with Session's CTO Kee Jefferys to discuss their decentralized messenger that uses private routing by default, requires no phone number, and runs on a network of thousands community-operated nodes. We dive deep into the technical decisions behind Session, including why they chose decentralization over perfect forward secrecy and how they're building a trustless messaging platform. Techlore empowers individuals with practical digital privacy knowledge, security tools, and advocacy resources. Discover how to protect your online data and regain control of your digital identity.

📱 RESOURCES IN VIDEO:

• https://getsession.org/

• https://www.linkedin.com/in/kee-j-090502157/

🔎 RELATED VIDEOS:

• https://youtu.be/aVwl892hqb4

• https://youtu.be/DPjg3651oJM

📺 RELATED CHANNELS:

• Surveillance Report: https://www.youtube.com/@surveillancereport

• Techlore Clips: https://www.youtube.com/@techloreclips

• Surveillance Report Clips: https://www.youtube.com/@surveillanceclips

• Henry's Personal Channel: https://www.youtube.com/@henry-fisher

🔐 TECHLORE RESOURCES:

• Techlore Homepage: https://techlore.tech

• Go Incognito Course: https://techlore.tech/goincognito

• Techlore Forum: https://discuss.techlore.tech

• Exclusive Signal Group: https://discuss.techlore.tech/t/signal-usernames-are-here-join-our-signal-group-techlore/7640

• Recommended Privacy Tools: https://techlore.tech/resources

🧡 KEEP TECHLORE INDEPENDENT:

• Become a Techlorian: https://discuss.techlore.tech/s

• Patreon: https://www.patreon.com/techlore

• YouTube Memberships: https://www.youtube.com/channel/UCs6KfncB4OV6Vug4o_bzijg/join

• Affiliate Links: https://techlore.tech/affiliates

• All Support Methods: https://techlore.tech/support

This content couldn't be freely available without our Techlorians, huge thanks to:

BRIGHTSIDE, Clark, Ente, Larry, Richard, Afonso, JohnnyO, kevin, love your content, x, 3c3c1d, Alexandre, Nadio, NotSure, Philip, Seth, Stephen, Steven

🌐 FIND TECHLORE ELSEWHERE:

• PeerTube: https://techlore.tv

• Mastodon: https://social.lol/@techlore

• Bluesky: https://bsky.app/profile/techlore.tech

• Twitter: https://twitter.com/TechloreInc

• LinkedIn: https://linkedin.com/company/techloreinc

• Telegram Channel: https://t.me/techlorefeed

⏱️ TIMESTAMPS:

00:00 Introduction

02:21 WHY SESSION WAS STARTED

04:12 THE TEAM BEHIND SESSION

05:30 SESSION USER THREAT MODELS

9:20 REGISTRATION & USER ID

13:07 IS KEY VERIFICATION UNNECESSARY?

14:58 ONION ROUTING

16:53 USING THE OFFICIAL TOR NETWORK?

17:57 WHY NOT TOR?

19:15 HOW DECENTRALIZED IS SESSION?

21:07 ARE NODES TRUSTLESS?

24:53 HOW SESSION HANDLES METADATA

27:28 WHAT CAN SESSION HAND OVER?

29:20 SESSION + BLOCKCHAIN

31:24 IS ENCRYPTED DATA STORED?

33:58 REASON FOR THE SWARM

34:55 WHY 7?

36:26 SESSION LOGIN & ACCOUNT RECOVERY

39:17 BACKUP & RESTORE

40:57 PFS (PERFECT FORWARD SECRECY)

46:56 IS SESSION A SIGNAL FORK?

48:10 USABILITY PROGRESS

52:58 DEVICE LINKING

54:25 CUSTOM NOTIFICATIONS/UNIFIED PUSH

59:25 ANDROID NOTIFICATIONS + BATTERY

01:02:34 SESSION'S BUSINESS MODEL

01:05:48 ENCOUNTER WITH LAW ENFORCEMENT

01:12:55 ARE THERE APP STORE PROTECTIONS?

01:16:58 WHAT'S NEXT FOR SESSION?

01:19:41 FAVORITE PRIVACY PROJECT?

01:22:41 OUTRO

YouTube Mirror: https://youtu.be/pxJMpRJQPw8

nostr:naddr1qqgr2dnrxvcx2ctpxu6nxenpxeskyq3qklkk3vrzme455yh9rl2jshq7rc8dpegj3ndf82c3ks2sk40dxt7qxpqqqp65wu273pc

Replying to

Wasted Potential

What's a good way to run LLM locally ?

https://github.com/OpenHands/OpenHands

Openhands is an option....

https://github.com/imattau/nostr-community-conventions

What NCCs are not:

They are not authoritative and they do not reserve anything globally.

Interesting fact: two conflicting NCCs can exist at the same time without protocol impact.

#nostr #decentralisation #ncc #nostrdevs #nostrdev

https://www.npmjs.com/package/@0xx0lostcause0xx0/ncc-manager

Reworked the interface of #ncc-manager - personally I like the feel of this one...

ncc-manager can be installed via npm - and at v0.3.0 - there will be issues...

#ncc #nostr #nostrdev #vibecoding

lostcause 1w ago 💬 1

Vibe-coding paid off 😄

ncc-manager v0.1.0 is live on npm. A little tool I built to actually draft and publish NCCs on Nostr. Already used it for NCC-00.

Very early release and likely to break in places, but it works well enough to be useful.

npm i @0xx0lostcause0xx0/ncc-manager

#ncc #nostr #nostrdev #vibecoding

Replying to

Whiteyesats Robosats Coordinator

Great share! Thanks for keeping us informed about Skiff Mail and other privacy-related news.

This is from nostr:npub1sehlkgvpelxmnd0wn7ec0grn9wyzw9gm6805wz8xl0gaw2c0377q4nfsgc #peertube 👍

nostr:nevent1qqs0rjqgguqh38k73mkq5dvl28zkfdp7l4y2kg9nqz9d0vqd8yy86fgzyz6axnhdclv0s8825hknw76694f5a62fltsvt2em4c99w648gawt7qcyqqqqqqg9ap3ez

Create a simpler NCC Viewer server - well, because it uses event kinds that most clients will ignore....

Can download from https://github.com/imattau/nostr-community-conventions

#nostr #nostrdev #ncc #viewer #server

Replying to

Gigi

Is there a NIP or something already which defines how silent payment addresses and/or BIP-353 identifiers are to be added to a nostr profile's metadata? #asknostr #devstr

lostcause 1w ago 💬 1

I proposed an idea that supports NIPs - that would probably help deal with what you've highlighted.... I called them Nostr Community Convention (NCCs)...

Replying to

lostcause

So - following on from the previous post - which proposes a system call Nostr Communities Conventions (NCC for short) - I vibecoded a #python app that works as a proof-of-concept for creating, publishing NCCs - and the other aspects like succession records and NCC endorsements.

It's not pretty, but seems to work - bonus!

You can have a play from the #github repo at https://github.com/imattau/nostr-community-conventions nostr:nevent1qgstt56wahra37qua2j76dmmtgk4xnhff8awp3dt8whq54m25ar4e0cpr4mhxue69uhkummnw3ez6vp39eukz6mfdphkumn99e3k7mf0qqs0rjqgguqh38k73mkq5dvl28zkfdp7l4y2kg9nqz9d0vqd8yy86fgygza5c

You can have a play from the #github repo at https://github.com/imattau/nostr-community-conventions nostr:nevent1qgstt56wahra37qua2j76dmmtgk4xnhff8awp3dt8whq54m25ar4e0cpr4mhxue69uhkummnw3ez6vp39eukz6mfdphkumn99e3k7mf0qqs0rjqgguqh38k73mkq5dvl28zkfdp7l4y2kg9nqz9d0vqd8yy86fgygza5c

Well - I guess if I going to mention anyone might as well go big -> nostr:npub1sg6plzptd64u62a878hep2kev88swjh3tw00gjsfl8f237lmu63q0uf63m

Although now... as i press send - not sure if I want any attention...

Ah well - f$%k it

Replying to

lostcause

So - following on from the previous post - which proposes a system call Nostr Communities Conventions (NCC for short) - I vibecoded a #python app that works as a proof-of-concept for creating, publishing NCCs - and the other aspects like succession records and NCC endorsements.

It's not pretty, but seems to work - bonus!

#nostrdevs #nostrs-devs #ncc

#proposal

lostcause 1w ago 💬 2

So - following on from the previous post - which proposes a system call Nostr Communities Conventions (NCC for short) - I vibecoded a #python app that works as a proof-of-concept for creating, publishing NCCs - and the other aspects like succession records and NCC endorsements.

It's not pretty, but seems to work - bonus!

You can have a play from the #github repo at https://github.com/imattau/nostr-community-conventions nostr:nevent1qgstt56wahra37qua2j76dmmtgk4xnhff8awp3dt8whq54m25ar4e0cpr4mhxue69uhkummnw3ez6vp39eukz6mfdphkumn99e3k7mf0qqs0rjqgguqh38k73mkq5dvl28zkfdp7l4y2kg9nqz9d0vqd8yy86fgygza5c

https://cdn.neat.tube/streaming-playlists/hls/bed3212a-6799-4337-a169-1ec643d39d35/70b64120-e99f-436e-8efe-a2521fc0b821-1080-fragmented.mp4

We've Hired Someone New!｜This Week in Privacy #28 (Nov 21, 2025)

By: Privacy Guides

Channel: https://neat.tube/video-channels/privacyguides

https://cdn.neat.tube/streaming-playlists/hls/bed3212a-6799-4337-a169-1ec643d39d35/43f54453-be64-4e94-add6-097599b73ad8-master.m3u8

https://neat.tube/videos/watch/bed3212a-6799-4337-a169-1ec643d39d35

Welcoming Nate Bartram to Privacy Guides! Also: WhatsApp is rolling out interoperable messaging in the EU, Windows 11 is rolling out an AI agent that scans your files and folders, and much more. Join us for This Week In Privacy #28!

Nate has been publishing resources at @TheNewOil for many years now, and is the former host of the @surveillancereport podcast. We're really excited about our plans going forward into 2026, and we shared a bunch of them in this video!

Timestamps:

(Coming soon)

Please 👍 like and 🔔 subscribe to our channel to support our work and find out about our latest video content!

❤️ Support our work: https://www.privacyguides.org/#/portal/

💬 Join the community: https://discuss.privacyguides.net

🏡 Visit our website: https://www.privacyguides.org

Have a question, comment, or tip for us? You can securely reach us on Signal at @privacyguides.01 https://www.privacyguides.org/en/about/

YouTube is known for silent censorship and general privacy malfeasance. If you want to discuss this video you can do so on our forum at https://discuss.privacyguides.net in addition to commenting here, and you can follow our channel on the fediverse at: https://neat.tube/c/privacyguides/videos

Privacy Guides is a nonprofit project dedicated to promoting privacy, best cybersecurity practices, and digital rights. As a part of MAGIC Grants, a 501(c)(3) public charity, your donation to support our cause may be tax deductible.

🎬 Credits

===============

Host: Jonah Aragon

Host: Jordan Warne

Producer: Jonah Aragon

Researcher: Kevin Pham

#twip #privacy #livestream