sudosophy on Nostr: I understand the concern over centralized servers, but all these refs flying around ...

I understand the concern over centralized servers, but all these refs flying around notes make me concerned about eventual consistency. isn't it enough to setup mirrored servers, that can be tapped into if one of them is compromised? Shouldn't the code owner be the one responsible for that?

if we are going to duplicate refs on nostr events, we are bringing git concerns to nostr events.. once a connection is established with a git remote-helper, git is the one listing refs in the server, and we are going to have to keep the server we are connecting to consistent with the notes we are serving on nostr

what prevents malicious notes from creating false refs, in that communication?