pull down to refresh
That seems bad. In my ignorance, does this mean someone could post a note claiming to be x npub without having the private keys to x npub?
No, their client only connects to their own server by default and the server crawls relays and caches notes. I assume they verify signatures there.
The problem is that Primal controls the server so they could fake notes from anyone.
That seems bad. In my ignorance, does this mean someone could post a note claiming to be x npub without having the private keys to x npub?