There are multiple ways you connect with people on nostr. By far the most common is that you find an event from a key you haven't seen before. And so that case must have a good solution. The case where you know the person and scan their business card or go to their personal URI is the easy case. I don't like the NIP-65 solution of "spray it everywhere". It requires people to just-so-happen to look for relay lists in the same places, which drives it to be a centralized thing. I really do like the DHT solution. But the bittorrent/mainline/Kademlia DHT handles only ed25519-signed data blobs. I'm starting to think standing up a new DHT using all the security learnings we have at this time from published academic papers (most of them from early 10s when everybody was into it) might be where we are headed. And I would strongly suggest that such a mechanism not be tied to just one cryptosystem, but to support multiple including PQ signature schemes. It is not just the nostr social graph I want to save, it is the flexibility of signature scheme. Sure you can wave your hands and claim quantum computing will never work. I did that about AI and I was wrong.

What I decided to do with chorus is that the inbox events are visible only to the people that the relay serves, which in my case is only 3 people, and the event's author.... until I actively approve them for public view. This prevents illegal content from being disseminated from my relay (even if it might arrive and get stored). The downside is that some people watching the conversation don't see the conversation in real time (if they however follow the stranger, they will see it from the stranger's relay). Sometimes I may go many days without moderating events on the relay, I've been pretty lax about it.

I agree the 'web of trust' is a powerful tool for spam filtering. For some people, they only want replies from people N-degrees away from them. In fact for most people that is probably true. 61 people that I follow also follow you, meaning you get a WoT score of 61 in my book. That's quite high. If I get a note from someone with a 0, especially if they say they are someone that I follow, I know they are an imposter. It's a powerful tool. And I agree with Terence that matrix ain't so hot. I'm expect he thought it was hot, and then became disappointed, and now is refusing to own his own emotions. And the real complaint is could make is against those people who wrongly told him it was hot.

Russia started it! ... the earthquake, that is.

https://en.wikipedia.org/wiki/Post-quantum_cryptography#Comparison

You sound like my mom. I'd forward this to her if it was an email. This is modern "jews" killing historical Israelites, stealing their identity and replacing them.

Man: "My brother thinks he's a chicken." Psychologist: "Bring him to me, I can fix him." Man: "I can't do that. We need the eggs."

It is likely that we will have a million or more deaths in Gaza very soon. It is unlikely that it can be stopped. Organ systems are shutting down. For most of us, all we could ever do was bring attention to the issue. So that is what we did. Let us all learn some hard lessons from this: 1) DO NOT BELIEVE ANYTHING that they tell you. Politicians don't speak truth, they seek only to manipulate you. Your country is NOT a noble country. ALL COUNTRIES are run by psychopaths. Operating below the radar and bypassing the "system" is the right way for MORAL and UPRIGHT people to live. The claim that only criminals use privacy is bullshit. KYC is a liability, not a safety feature. We need privacy to protect us from these psychopaths. 2) What will happen is NOT what you *hope* will happen. Stop thinking with your *hope*. Think with your brain. 3) The world will always have HORROR happening, constantly. You cannot let that hijack your mind. Do what you can, and then if you cannot do anything more about it, put it aside. 4) LOOK OUTSIDE of your political tribe. I can't tell you how many of my friends and relatives refused to believe anything about Gaza because it came from "the left".

I was AFK until now. Here is your reply. I hope it still serves some kind of purpose.

More like nostr

You are right.

You are right.

Nicely done. I symlinked my own ~/.local/share/gossip to a faster device.

The Earthquake happened in Russia's territory, therefore they are responsible for it, even if it was an act of God. Bad Russia! ;-)

Trump is a pedophile. If he wasn't, he would prove it. Why doesn't he prove he isn't? Because he is. Simple as that.

I like your point. But we cannot compare the data half of nostr with the resolution half of pubky. Nostr strictly-speaking is the client-relay protocol, which can also be blocked. Pubky identities could also sign data and send them around with paper airplanes if they get blocked in China.

Have you ever played Eve Online? Within a solar system you can warp to any point. Most of the space is utterly empty and finding where some ship is requires probes and successive iterations of scanning and zeroing in on the ship. Giving the ship some safety time after which it can just warp to another random place in the solar system. In ground-based-walking-around games there simply isn't enough space for such a dynamic to occur. Eve took advantage of a lot of other aspects of space that can't work in a ground-based system like shooting-lag, ship moving lag, etc, to hide the impossible-to-eliminate Internet lag. Anyhow, your idea reminded me of this.

A subset of nostr, the events, sure.

Maybe relay operators should read it too. Spam can be handled at the client or at the relay. I find him rather distasteful and disrespectful however for shitting on open source developers for creating something that isn't good enough for him. They didn't blame him where he calls it "victim blaming," they gave him practical advice he didn't want to hear. He shouldn't use matrix if he doesn't like it, but also he shouldn't go shitting on them. Constructive feedback, rational assessment, that's all fine. But the moral opprobrium and implicit entitlement to imaginary features stinks of leftie to me. Just sayin'. Any good libertarian would pull the source code and fix it. He didn't really think through the idea he hints at, that "a stranger shouldn't be able to bombard users with multiple notifications." Imagine that policy was adopted and coded. Then a stranger could setup 100 sock puppet accounts and still do it anyways. Imagine then there was some gatekeeping to who was allowed to join in order to solve that problem. Now the situation is even worse, don't you think? Or maybe strangers aren't allowed to contact you at all. That's fine, and should be a personal choice since that has an obvious down side. There doesn't really exist a perfect solution to this problem. I've written about the options available before I won't rehash them here.

The sizes of the keys and signatures aren't even the most important factor. Security of the algorithm comes first. And I just don't know enough. All I really care about is flexibility at this point -- make things work with any key size and any signature size and any algorithm, so that it is PQ ready, without actually making any choices right now. I'm hoping the cryptographers make better stuff in the future before we need these.