As @hzrd149 said
hzrd149's avatar hzrd149
For all the Nostr developers out there I challenge you to use your apps in manual approve mode ( no automatic signing ) with a signer like alby or amber. I'm willing to bet it will be almost unusable I would say at least half of the apps I've seen built on Nostr just don't work unless you give the app full control over your key, by either pasting the nsec or giving it automatic signing privlages. This is bad UX and shows that the app does not respect the user at all. What's the point of having cryptographic signatures if I can only uses them in "sign everything" mode? I will zap you 10k SATs if you post a screenshare in the next day or so of how well the app works or doesn't work with manual signing
View quoted note →

Replies (1)

i just don't think client devs are qualified to speak about the subject of spam mitigation countermeasures, let alone mitigating impersonation attacks or sock puppets i find it incredible that you don't even have experience with running an SSH server on a VPS and have never looked at the endless logs of attackers trying to breach your server with common passwords it's not optional, and your comments, and hzrd149s demonstrate why a network protocol designed by client devs is going to be a failure you don't remember reply guy?