Braydon Fuller on Nostr: In some ways it helps and in others it doesn't. In Amethyst, I think it means you're ...
In some ways it helps and in others it doesn't. In Amethyst, I think it means you're following them and not necessarily verified.
Here are a few scenarios:
A) If the profile (maliciously or otherwise) changes their name, pfp, bio and etc. (kind 0), it'll be difficult to know which one of your follows/contacts it was when you initially followed them. This could be used to imposter someone.
B) If the private key of a profile is compromised (similar to A) all metadata can change. If notes appear from this account that the key has been compromised and to migrate to a new key; it will be very difficult to recover and determine honesty. The NIP05 nostr address will also not be useful, as that too could have changed.
C) If you're not following someone, yet still want to be able to verify them, the mark won't help in this case.
There may be others scenarios as well, and plan to go through and document these in more detail. I have a few NIPs drafted to introduce a profile metadata attestation event kind that could be used to verify profiles and mitigate and help the above scenarios.
Here are a few scenarios:
A) If the profile (maliciously or otherwise) changes their name, pfp, bio and etc. (kind 0), it'll be difficult to know which one of your follows/contacts it was when you initially followed them. This could be used to imposter someone.
B) If the private key of a profile is compromised (similar to A) all metadata can change. If notes appear from this account that the key has been compromised and to migrate to a new key; it will be very difficult to recover and determine honesty. The NIP05 nostr address will also not be useful, as that too could have changed.
C) If you're not following someone, yet still want to be able to verify them, the mark won't help in this case.
There may be others scenarios as well, and plan to go through and document these in more detail. I have a few NIPs drafted to introduce a profile metadata attestation event kind that could be used to verify profiles and mitigate and help the above scenarios.