Is the trust model basically: trust Zapstore to point to the right URL and app creator signing info on first install, and then all updates after are signed by the app creator?
{
"id":"d53aeb01ab434d972da4f94f0c94e62415f3e868c3e99d0b65038b8c680a2a8d",
"pubkey":"7286946a0e00a4861eb7547ee0a98d476ae2bdd359b32da6a24dc6efbedc1002",
"created_at":1789577165,
"kind":1,
"tags": [
[
"e",
"94d5a159aac4a30eba5e7d55dc5a66f863bbcfaa84b61e39fb95ec77e1390387",
"wss://relay.azzamo.net/",
"root",
"b7ed68b062de6b4a12e51fd5285c1e1e0ed0e5128cda93ab11b4150b55ed32fc"
],
[
"p",
"8bf629b3d519a0f8a8390137a445c0eb2f5f2b4a8ed71151de898051e8006f13",
"wss://relay.primal.net/"
],
[
"p",
"78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d",
"wss://relay.damus.io/"
],
[
"p",
"b7ed68b062de6b4a12e51fd5285c1e1e0ed0e5128cda93ab11b4150b55ed32fc",
"wss://nos.lol/"
],
[
"client",
"Amethyst"
]
],
"content":"I have a question about nostr:nprofile1qqs83nn04fezvsu89p8xg7axjwye2u67errat3dx2um725fs7qnrqlgpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9mhwden5te0wfjkccte9ec8y6tdv9kzumn9wshszrnhwden5te0dehhxtnvdakz7adgsu4 \n\nIs the trust model basically: trust Zapstore to point to the right URL and app creator signing info on first install, and then all updates after are signed by the app creator?",
"sig":"b5076cf1550ac8bdf62281271982cd3514de68e269dc549b4a549594d64e9e16006f85f3eb305a056de4a4a3995d6d89abb406c858899eaaa1284b0dce9011f4"
}