for the clowns like fiatjaf and others who seem to not understand that relays have a MORAL OBLIGATION to require AUTH for DMs it says right here in the current version of NIP-42
https://images.mleku.dev/9L/nip42-2025-03-10%2015-46-56.png
and i am gonna quote the exact commit ref as at this point now so nobody is confused:
https://github.com/nostr-protocol/nips/blob/e6552476aa2e5ca7256be572a9aa226ec8a022ee/42.md
what does that say in the highlighted line there? huh?
why is this not already understood to be the obligatory standard for protecting users privacy?
because the clients sure as fuck don't seem to understand it, #nostrudel doesn't respond nicely when it asks for kind 4 and 1059s along with other shit and then refuses to keep querying the relay because it gets an OK,false,"auth-required" response and i had to change my #realy flow so it just strips out those privileged event kinds that can't be seen without auth proving you are party to them
and it still misbehaves about this, i think it's getting NOTICEs still that say that the client is asking for stuff it hasn't authed to see but nope, no, these assclowns still don't get it
they clearly don't read a thing they even write in their own fucking documents
please, don't expect me to be kind about this gross violation of user privacy, go, actually fuck yourself, with a giant fucking barbed pole
also, yes, the response that #realy sends is CLOSED not OK,false,"auth-required:...." - and, it does fulfill the request FIRST before it sends that message back, with the sensitive event kinds ignored for what it does return, so there is something wrong with the client logic, it's not my fault and their stupidity is the whole reason why nobody uses nostr messages
come to think of it, another reason is that i'm pretty sure almost no relays properly implement delete so you can't delete your DMs either, and they mealy mouth waffle about "it's out, it's out" yeah but the relay should not either refuse to delete it nor allow it to be reinstated when the author sends a delete event
it's just not ok to be pretending that they are just not doing it because of lowest common denominator malicious behaviour of others
that's not how honor works, guys, and the fact you don't understand that makes you very much suspect for being trusted with other people's data, and certainly nobody should be running your software if they actually have a fibre of ethics in their body
Showing page 1 of
1 pages
