Does the feed really need to be serialized and hashed, or just have the most basic of ...

npub1yvg…6pv9

2025-02-18 19:06:51

in reply to nevent1q…cm3p

Does the feed really need to be serialized and hashed, or just have the most basic of signatures?
Here's an b64 encoded signature. Are you able to decode it and verify that StevenB (npub1yvg…6pv9) signed this feed? https://www.base64decode.org/

eyJjcmVhdGVkX2F0IjogMTczOTkwMzE0MiwiY29udGVudCI6ICIiLCJraW5kIjogMzMzMzMsInRhZ3MiOiBbXSwicHVia2V5IjogIjIzMTAzMTg5MzU2Y2Y3YzhiYzA5YmI4YjQzMWZjM2U3MWU4NTU4MmM4Zjc1NWI5ZWUxNjAyMDNjOWMxOWU0MDMiLCJpZCI6ICJiMTVkNzg4NGJkMDkyODQ1NDczYWVlODgxYjhiMTNkNWJjMjI1NmNiOWE0Yzk0N2UxZDIyMTM1ZmU4YzcyZWRjIiwic2lnIjogIjcyMDIxNTIwYzIxNDUzNDEyN2NiMDNmMDM2MzE2ZjkwZWRlMTU4YzM0YzQ4YTUwMGE0Mzk1MzM3YjhjNzU3NTFhMGMzMWM5OGQ0OWI1MzU5OTliNDNkZjA1NDZlZmFiODg3MjIxMDE4MmIzOWI5MjNhMzgzZjZiZTQ0MjBmZjBiIn0=

If this is in the feed, isn't that enough for a server to know that the feed has been authorized by the npub to be updated. https://raw.githubusercontent.com/thebells1111/bible-song-band/refs/heads/main/feed.xml

Basically, a server gets a request for a feed update, looks up the old feed, check the npub in the old feed, verify the new feed has the same npub, check the signature, if it's legit, then update the old feed with the new feed. This can be done across multiple servers for redundancy.

Author Public Key

npub1yvgrrzf4dnmu30qfhw95x87ruu0g2kpv3a64h8hpvqsre8qeuspsgd6pv9

Seen on

wss://relay.primal.net

Show more details

Published at

2025-02-18 19:06:51

Kind type

1 Short Text Note

Event JSON

{ "id": "7ceae65848baf57fb8ec34c19918c7d1bd9f8a2a593fd04dd1fb27a8038fd2d8", "pubkey": "23103189356cf7c8bc09bb8b431fc3e71e85582c8f755b9ee160203c9c19e403", "created_at": 1739905611, "kind": 1, "tags": [ [ "e", "95e15bda61fc6856171b303cf850c5ad9c6d76dd5a8eaf0699763af03fc402a7", "wss://relay.damus.io/", "root", "23103189356cf7c8bc09bb8b431fc3e71e85582c8f755b9ee160203c9c19e403" ], [ "e", "e6ef370c9b7018e8c41489aba70aad97d3f5c7b2adb758232acdf5768f2213ae", "wss://purplerelay.com/", "reply", "266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5" ], [ "p", "23103189356cf7c8bc09bb8b431fc3e71e85582c8f755b9ee160203c9c19e403" ], [ "p", "266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5" ], [ "p", "fa984bd7dbb282f07e16e7ae87b26a2a7b9b90b7246a44771f0cf5ae58018f52" ] ], "content": "Does the feed really need to be serialized and hashed, or just have the most basic of signatures?\nHere's an b64 encoded signature. Are you able to decode it and verify that nostr:npub1yvgrrzf4dnmu30qfhw95x87ruu0g2kpv3a64h8hpvqsre8qeuspsgd6pv9 signed this feed? https://www.base64decode.org/\n\neyJjcmVhdGVkX2F0IjogMTczOTkwMzE0MiwiY29udGVudCI6ICIiLCJraW5kIjogMzMzMzMsInRhZ3MiOiBbXSwicHVia2V5IjogIjIzMTAzMTg5MzU2Y2Y3YzhiYzA5YmI4YjQzMWZjM2U3MWU4NTU4MmM4Zjc1NWI5ZWUxNjAyMDNjOWMxOWU0MDMiLCJpZCI6ICJiMTVkNzg4NGJkMDkyODQ1NDczYWVlODgxYjhiMTNkNWJjMjI1NmNiOWE0Yzk0N2UxZDIyMTM1ZmU4YzcyZWRjIiwic2lnIjogIjcyMDIxNTIwYzIxNDUzNDEyN2NiMDNmMDM2MzE2ZjkwZWRlMTU4YzM0YzQ4YTUwMGE0Mzk1MzM3YjhjNzU3NTFhMGMzMWM5OGQ0OWI1MzU5OTliNDNkZjA1NDZlZmFiODg3MjIxMDE4MmIzOWI5MjNhMzgzZjZiZTQ0MjBmZjBiIn0=\n\nIf this is in the feed, isn't that enough for a server to know that the feed has been authorized by the npub to be updated. https://raw.githubusercontent.com/thebells1111/bible-song-band/refs/heads/main/feed.xml\n https://image.nostr.build/c31d6002d48d271f1ec45ed49e411a66876ff433fa6e63e93416dd02311d8bb5.png \nBasically, a server gets a request for a feed update, looks up the old feed, check the npub in the old feed, verify the new feed has the same npub, check the signature, if it's legit, then update the old feed with the new feed. This can be done across multiple servers for redundancy. ", "sig": "5c76e387e93cac0bea8c5881e4acb5e2f6d49b91a321c9aa69943bd264d5bd6ee41dfd5b133864e912c8eda9021cdf24d6353b156259e775262742d15c124857" }