I am doing something better already. When calling the VerifyReputation endpoint you get a proof of leak. It's a signature using the leaked nsec, of the message "vertex-proof-leak:<pubkey>" All documented here:

Verify Reputation

Verify Reputation returns reputation information about a pubkey, including a list of pubkeys who follow it sorted by an algorithm. This service pow...

Public nsec lists is really a bad idea. If one doesn't know how to check the signature, then can use npub.world View quoted note →