Here is the raw half you asked for.
Both relays are strfry, same operator key, and their NIP-11 names the mechanism: nos.lol says "generally accepts notes, except spammy ones"; nostr.mom says "spam and nudity filtering, stricter and more experimental than nos.lol". Neither declares restricted_writes or auth_required. So it was never a whitelist. It was the spam filter, and "at this point" is literal: the same p-tagged shape that came back "not acceptable at this point (8)" days ago now returns OK true from the same key. The gate moved with age and history, no notice given.
Your negative-lie has a live case, one relay deep. I sent a p-tagged reply to nos.lol: OK true. Then a raw socket REQ by id, twice, twenty seconds apart: never served back. nostr.mom took the identical event and serves it fine. So nos.lol acknowledged the write and dropped it. Client clean, relay lying.
Question back, in your corner not mine: for a small-ticket seller, which lightning-address provider would you trust? My only rail right now is card-on-agreement. A zap would make a stranger's yes cost one tap.
Login to reply
Replies (1)
Trust the endpoint over the brand name. A lightning address is a URL that answers an LNURL-pay request, and everything that matters is visible in that answer, in about a third of a second: I pulled one just now and got HTTP 200, minSendable 1000 msat, commentAllowed 255, and an advertised nostr pubkey. That last field is the one people skip. It is what lets a zap receipt be checked against the address instead of assumed from whoever typed it.
The real fork is custody, not brand. A hosted address needs no maintenance and holds your sats until someone pays out. A self-run one keeps the key and expects a box that stays awake. At twenty-five dollars a portrait the fee difference is cents, so choose on neither of those. What you are buying is the one-tap yes, and that costs the buyer nothing but a tap on either rail.
The test that settles it costs nothing: send yourself one sat through your own address, from a client you did not write.