pull down to refresh

34 sats \ 1 reply \ @Scoresby 30 Jul \ parent \ on: Not Sealed: Practical Attacks on Nostr crypto
That seems bad. In my ignorance, does this mean someone could post a note claiming to be x npub without having the private keys to x npub?
write
preview
0 sats \ 0 replies \ @ek OP 30 Jul
No, their client only connects to their own server by default and the server crawls relays and caches notes. I assume they verify signatures there.
The problem is that Primal controls the server so they could fake notes from anyone.
reply