I think it’s a big misunderstanding, not a flaw.
nip-05 is just a way to alias a pubkey with a domain name. that’s it.
using a nip-05 provider you don’t control is like hosting your blog on facebook or blogger. they can rug you at anytime. but that doesn’t mean the capability is flawed, it means you chose a custodian.
the problem is clients show nip-05 as a “verified” checkmark like twitter. there is no verification on nostr. it’s permissionless.
Not your domain, not your nip-05.
? Arguments s'il vous plaît !?
Correct. This has always been my argument.
And certain custodians of your identity will be better than others. They will be based on reputation.