For one, we have relays, they have pubkeys, and yet, we still rely on the certificate chain.
In a better world, relay lists should contain the relay host (or better, its IP) AND its pubkey, and those pubkeys should be directly used in diffie-hellmann key exchange when initializing secure connection.
The problem with this approach is that there is - to my knowledge - no technology embedded in browsers by default that achieves it effectively.
npub1el…2cume
2025-12-28 15:44:46 UTC
in reply to nevent1q…ylzm
Author Public Key
npub1elta7cneng3w8p9y4dw633qzdjr4kyvaparuyuttyrx6e8xp7xnq32cumePublished at
2025-12-28 15:44:46 UTCEvent JSON
{
"id": "924fdfc4eb100b4c52db6c282e2e9c48fd128ad789ff441b3db8bca93d769a6e",
"pubkey": "cfd7df62799a22e384a4ab5da8c4026c875b119d0f47c2716b20cdac9cc1f1a6",
"created_at": 1766936686,
"kind": 1,
"tags": [
[
"e",
"6ae66934a6bb962810b88bd9f3470e759edd23e695e94980d95ec19abf86f9d4",
"wss://pyramid.fiatjaf.com/",
"root",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
],
[
"p",
"ee6ea13ab9fe5c4a68eaf9b1a34fe014a66b40117c50ee2a614f4cda959b6e74"
],
[
"p",
"3bf0c63fcb93463407af97a5e5ee64fa883d107ef9e558472c4eb9aaaefa459d"
]
],
"content": "For one, we have relays, they have pubkeys, and yet, we still rely on the certificate chain.\n\nIn a better world, relay lists should contain the relay host (or better, its IP) AND its pubkey, and those pubkeys should be directly used in diffie-hellmann key exchange when initializing secure connection.\n\nThe problem with this approach is that there is - to my knowledge - no technology embedded in browsers by default that achieves it effectively.",
"sig": "bc8d68a08ee1e5e0c1da9d6257fae65fd10fef845e04d0a8d969370078ffa01fbc5e12f88e3651e2fffa31b0c211d515ff3d85808e4a7ea4292feaedf7c5bc1d"
}