Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secure Profiles #1499

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Conversation

braydonf
Copy link
Contributor

This NIP defines a protocol to secure user profile metadata (kind 0) with attestations of tags, keys and values. Users can verify other users' profile metadata with a public or private attestations.

This has several advantages:

  • Protection of the impersonation of user profiles. It's possible to verify a user profile without following them.
  • An ability to verify different values of the metadata as a user or through a user's web-of-trust. This could be useful for various spam mitigation and filtering techniques.
  • Post-compromise security of a profile. The verified NIP-05 nostr address and other values can remain original. This could expand to have additional pubkeys for a profile to help determine honesty.
  • Ability to expand into a naming system for (.onion addresses, nostr addresses and etc).
  • Granularity, not all metadata is verified, any tag or key/value can be verified and duplicated in the attestation.

Read in Full

@braydonf
Copy link
Contributor Author

braydonf commented Oct 7, 2024

Here is a wireframe animation of a possible UX implementation for this proposal:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant