I just don’t understand how Nostr helps here. We just need a public repository.
I intuitively see this as a fetish to use favorite technology for everything, just like shitcoiners do.
I like to ask them if this usecase can be solved by just git and signinatures, where is the value a blockchain technology adds.
Replies (2)
Nostr events are signed by an author and can easily be replicated to multiple relays.
A git repo can also be replicated but a client wouldn't subscribe to several, so you would have centralization there.
Accountability is not integral to git neither.
Google Full Disclosure vs. Responsible Disclosure and you can see how disclosing issues or the mere possibility of issues is a hot topic and often draws censorship.
Nostr doesn't use a blockchain, it has nothing to do with Blockchain
What it adds us web of trust coming from social follows. I would trust your attestation that you audited something, but a random bot can be the person introducing the backdoor himself.
