oren_z0 on Nostr: The main issue I see here is not privacy, but the fact that someone can “share” a ...
The main issue I see here is not privacy, but the fact that someone can “share” a media file (link to an image/video), and some users will see a different file if the server is malicious.
This could be solved if the event contained the sha256 of the media file, so clients could verify.
Published at
2024-10-17 23:12:47Event JSON
{
"id": "09aadcd7edfb08736fb022b350bfb491a3bb63dde25f6dc5bd8447379079dc0e",
"pubkey": "3316e2d88ff91e1089c75feedcd8baa2258b45455a3b156af617d7ec79b45fe5",
"created_at": 1729206767,
"kind": 1,
"tags": [
[
"e",
"5046e90fb64e998f267640b37936261b6a9a56ba1b66a6a093d560706734e9c6",
"",
"root"
],
[
"e",
"63c33cb5d2e652ee41937581d96cb778b1d3f04edf5d318adb0c4a2cf03e1516",
"",
"reply"
],
[
"p",
"d9dba0e072bdb353dfb0020de159126af47e69e133ea91bbd48e8bede37320e2"
],
[
"p",
"32e1827635450ebb3c5a7d12c1f8e7b2b514439ac10a67eef3d9fd9c5c68e245"
]
],
"content": "The main issue I see here is not privacy, but the fact that someone can “share” a media file (link to an image/video), and some users will see a different file if the server is malicious.\n\nThis could be solved if the event contained the sha256 of the media file, so clients could verify.",
"sig": "9ed83a84296fdb64596e086fe83830440a7903b0c6eea47b815a994c6de4426fccbe83d7d97d194762e17f6769699ec7ff293d56a52adc126d55ee33a864ab88"
}
