So are you speaking from the relay operator perspective or from the developer's responsibility? I would expect operators to comply with legislation for the region they operate in, exactly how typical web2 application operate. I would expect to be forced to comply with cease and desist or take-down orders if you fall under the jurisdiction of the region summoning you. If you operate a relay in the EU, and the EU government slapped you with a take-down request I'd expect to comply. These are things we've discussed at GitCitadel, we agree we don't intend to operate out of compliance, however we will do everything we can to empower customers to operate their own equipment to avoid government action. Dealing with feds in any country is no joke, they have the power to turn your life upside-down with the click of a pen. I personally believe a single company or founder of a company should not die on the hill of non-compliance, there are ways (for now) to keep you on the outside of a prison cell. IMO we are way more useful outside than inside one.

Replies (3)

That's the reasonable take, comply and promote freedom, silly idealism combined with low technical skills it's far too common and far too dangerous.
Answering here since the conversation below went in a different direction. In Anthony’s Wishful Thinking Universe, there’s basically no distinction. That is, users running relays on their mobile devices or Raspberry Pi are operators just like the big ones, such as @someone, @cloud fodder, and others. Folks running Haven, for instance, are storing and serving notes from people in their WoT when those people tag them. (I’m serving your note above from my Inbox relay; it’s small scale, of course, but people running personal relays are still relay operators.) In practice, I expect law enforcement to go after the big players (Primal, Damus, nos.lol, nostr.mom) first, due to their scale and the higher likelihood of finding adult content on their relays. But we also need to provide tools for the smaller-scale operators to self-moderate as well. Regarding government compliance (e.g. facial recognition, ID checks for age verification), I don’t think it’s up to me or other relay software devs to bake compliance directly into the relay software. However, moderation tools should be designed in a way that allows operators to build their own ad hoc compliance solutions. For example, @Mike Dilger ☑️ suggested implementing an approval queue. Then it's up to the relay operator to verify the user’s age before releasing a post, however they see fit, especially if they’re operating in the UK. Of course, I wouldn’t impose this on all Haven users / operators. There should be an auto-approval flag for folks in countries with less strict compliance requirements. Still, the option to enable an approval queue should be there, and it’s definitely jumping the queue on my list of side quests (That said, it’s not something that’ll be ready tomorrow, unfortunately).