This new Yakihonne version fixes DMs completely apparently.

NIP-17 is working pretty well now on Amethyst, 0xchat, https://yakihonne.com/, https://chachi.chat/dm?

Also Coop, Nostur and Damus Notedeck if I'm not mistaken.

@nevent1qvz...

I wasn't saying that web clients aren't real Nostr clients at all! After all web clients can run locally and be totally independent of any server (except for some server that may have to initially, once, serve their assets, but that doesn't even have to be a single server).

No, the metrics and search stuff are unrelated, these definitely require special servers.

But I think the main note was about nsec.app, or maybe I misread.

In any case I wasn't talking only about that, that was just one example, my point is valid for many other cases.

This looks like a good enough solution.

I wasn't. I was just talking about hosting Nostr clients in a way that is independent from domain names.

If your client is just client-side assets these can be hashed and downloaded from many different places, they don't have to come from one canonical URL controlled by one guy.

Are all these things because of secp256k1 or because these guys who made these things decided to not support it?

nsec.app shouldn't require any servers, it runs in your browser. Or at least that's what I was told.

Real Nostr clients don't require any servers, they can work completely on the client side.

The fact that we have apps that still work perfectly well but are now inaccessible because a domain name has expired (or whatever) is some bullshit we inherited from the "web" world that we should try to circumvent, not embrace.

There are multiple ways to circumvent these flaws and build true Nostr clients that can't be controlled by anyone, not even by their original author.

@nevent1qvz...

That's not my npub.

What do you mean by unaccepted and impossible to fight? Why do you want to fight them? No one ever used the big SQRL version as far as I know.

That guide is outdated, but these two things are enabled already.

It makes no difference. Here's the traffic for the last 24 hours:



Either Cloudflare bot detection is pitiful and only catches 1% of the bots or njump.me is one of the most popular websites of the internet (even though it never loads).

SQRL invented the anti-phishing public key cryptography based approach to website authentication many years ago. It was a beautiful spec of one page with multiple grassroots implementations.

Then they decided that the simple "I sign something with a key" approach wasn't good enough, they also had to cover a bazillion other key management things in the protocol so they brought a team of academics that turned the thing into a 300-page unreadable spec that no one ever implemented fully.

LNURL-auth basically reinvented the original simple SQRL version in 2019 and got many implementations and some traction within the bitcoiner realm.

But at the same time another team of academics probably by paid by some evil people were creating Webauthn, i.e. "passkeys", which solves the exact same problem and works in the exact same way, although this time the spec is much bigger than even the worst version of SQRL and apparently designed to create centralization.

It took them at least 6 years to get browsers and phones and some websites to start adopting this behemoth, but so far there are no answers to what is their real purpose or to the question: "what if I lose my phone?".

https://www.youtube.com/watch?v=xYfiOnufBSk