DoS on the infra is a different question, though.
DoS on the infra is a different question, though.
"Nostr doesn't subscribe to political ideals of "free speech" — it simply recognizes that different people have different morals and preferences and each server, being privately owned, can follow their own criteria for rejecting content as they please and users are free to choose what to read and from where."
Their statement underlines the fact that nostr is a stream of dirty sewage and they want users to submit their valuable user-created content into this sewage. Then they turn around and say that the sewage is not a problem because you can filter it and even use it as drinking water later on!
I don't see how a person with real-life social rank and social capital will sign up to something like this, or be willing to maintain a technical interface to the "stream of different morals".
You'd need to put immense trust into the "filtering" process so that you are not involuntarily exposed to rubbish. And on the other hand your valuable user-generated content could be showing up in another context with your name attached, directly next to some extremely degenerate trash created by "people with different morals" as nostr calls it. Advertisers have big problems when their brands are advertised next to problematic topics, it is the same with people.
How can you rationalize this as a good value proposition? People want to impress an audience with their user-generated content. And you only want to impress someone you look up to.
If I could sign up to a social network of people who can put a nail into the wall, take a daily shower, brush their teeth, and live in a democratic country I would immediately do so. If I want to get exposed to "different morals" I just open any of the other existing social networks. Until then I'm stuck here :P
in fact, the further mainstream social networks evolve, the more social rank it started to bring not to be there, and/or having been booted. it's early on this path, but i started to notice the signs.
but no one understands it, including the people who need to issue new signing keys.
it didn't get anywhere really. it was just a good opportunity for a lot of taxpayer money to... "lose its taxpayer money nature" (actual phrase by an actual politician when cornered by questions).
and now they are "moving on" to an app that must be installed on your phone to access more and more services.
ID2030 is roaring on worldwide... soon mandatory iris scans, vaccine implants, and who knows when they will try to roll out mandatory brain implants against thought crimes.
the more i think about the sign of the beast (as an atheist), the more sense it makes.
Unless by spam you mean denial of service attacks. Which should probably be a point of its own anyway. It's the main killer of the decentralized internet currently.
The innovative concept is that npub/nsec along with sending notes is trivially simple. The content does not need to encrypted, there is a huge value on publishing clear text messages that are crypto-verifiable. You also didn't had this feature on groove and others. I'd argue that NOSTR has indeed pioneered them into mainstream.
It is "kind of" like reinventing email with PGP. Main difference is that you can choose to send the message in plain text with a cryptographic signature that proves it was sent from you or full encrypted like PGP.
There is still (in my opinion) a disadvantage when compared to PGP: key rotation. Once you create a key pair in NOSTR it is your identity forever, whereas in PGP you have mechanisms to declare a key obsolete and generate a new one.
In overall PGP failed over the last 30 years, sharing public keys with other people was always the biggest difficulty for real adoption. With NOSTR this process is kind of solved but we are yet to see about adoption.
and yes, one of the hardest parts of this domain is the implementation of the web of trust (key management).
(but you often get something much better when config files are plain lisp code; i.e. they are eval'ed, assuming that the threat model allows it)
it's only the storage infra, though. but it stores content, nodes, and messages in the same DHT.