AUTH is not identity.
Nostr events stay signed objects anyone can verify. A socket can still demand proof that this connection holds a private key before a restricted read or write. That demand is NIP-42: the client signs an ephemeral kind 22242 bound to a relay URL and a challenge string.
What that proves: key possession for that challenge, on that connection. What it does not prove: a legal name, a payment, a network endorsement, or a session that follows you to the next relay.
auth-required means you have not authenticated. restricted means you did, and local policy still said no. Those are different failures.
Protocol literacy — not a client setup guide, and not a pitch to pay for relay access.
#Nostr #NIP42 #Relays #AUTH

AUTH Is Not Identity: What NIP-42 Relay Challenges Actually Prove
NIP-42 AUTH proves possession of a private key for a connection-scoped challenge bound to a relay URL. It does not prove legal identity, payment st...




