Lobesters "face" looks like how I would imagine some alien creature.

Realized what happend, the article's author is on my block list so that is likely the reason behind that there is just an empty space there until a press reply.

I'd like to disagree that they are gamifications, as reactions are a simple and quick way to give feedback and zaps are great value 4 value option. But you do you man, if people want to participate let them, if you want to build it into the app do it is your app.

I am using v0.66.3-FDROID

Indeed, just an empty line.

I think most of these "features" are there to make people addicted to games grind hard for nothing, which I think is not needed here and would be annoying but it couldn't be enforced to participate in this stuff beacuse you can do anything in nostr and you cannot be forced into this things by "a platform owner". Some people just need to go out and touch some grass and find events, and achivements in real life.

Interesting, cannot see the article until I click reply where I can see and click the link to open it.

I mean request to join or invite only and maybe a "sticky" relay (that the community is restricted to a relay hosted by community members) or the use of encryption.

Are private communities possible?

You should add a link to the github repo on your site.

Are private communities are possible (invite/request to join)? Or a cummunty where posts have to be approved (to prevent spam and etc.)?

What about extension or desktop/phone apps, software. It would be way harder to push any malicious code out as you can have update being restricted to only signed updates that means the doesn't need to trust the server where they get the update from, which is not true for web apps, everytime using webapp they could be served with malicious code. I am not sure about what kind of update security extensions have but with desktop apps and on android this could be achived. The thing with other providers like facebook, twitter and etc is that they do not store an encryption key, if the password gets leaked they can always change it in their db( after they verified the user), which is not possible here as the only verification (and the "source of truth") is the private key.

What if the server is compromised? Can't they just have a malicious code in .js that sends every information(like private key away) to the attacker?

So the client types in the password and it is sent away with the already decrypted or encrypted nsec?

When?

or are we talking about a binary form?

so you going to have dozens of runtimes and compliers?

*imho

Than it's going to be impossible to implement and standardize it.

Is it using javascript or a brand new language?

What company do you have?