Oddbean new post about | logout
 Well, right now the relays do accept delete commands from any moderator.  Right now it's using 1984 but it could listen for any event from a mod and perform a delete action..

Using this same technique, it might be possible use a new event kind from a moderator, and unwrap an event that you were to send it and inject it straight into the relay bypassing the ACLs.. 
 Hmm interesting, yes that's also a possibility. Although it means I can't use existing tools to broadcast mod writes. But then adding nip42 for writers makes most tools unusable too. 🤔   
 Might be able to use boosts somehow.  Say a mod boosts a note, and it goes and fetches that note and inserts it. 
 That's fun, but it sounds like such logic should be handled by separate writer/automation process with custom logic.  

How about a bearer auth token in headers that allows writes? This would exclude most of existing software to rebroadcast notes to that relay, but it should be trivial to implement at strfry and then we could build various "plugins" that would handle the above or other interesting curation logics.   
 Ya it's funny I was just searching around for doing header auth on websocket upgrades and it sounds like browsers (JavaScript websocket API) don't support this.. course that's just stackoverflow I didn't deep dive on it. 😁 
 Oh shit that's true, no websocket headers from browsers :(
It could be a 'secret' included in url but then it will be logged by every damn thing in the middle of you and the relay, not sure if passing long-lived secrets in urls is a good practice. 
 Maybe now I get why nip42 is the way it is haha 
 Yeah I remember most of this stuff discussed in nip42 PR 😉  
 One other crazy idea, is that you could have two relays. One with an obfuscated url, and one for the public. Then use streaming behind the scenes to move the events across.. anyone with the obfuscated url would have write. 
 Also not sure if using secret url is a good idea nostr:nevent1qqsrcndt8wmv7erlccjf6kcamsr2pzferkxa70fcc0fk3q2gny7wnmqpremhxue69uhkummnw3ez6ur4vgh8wetvd3hhyer9wghxuet59upzqv6kmesm89j8jvww3vs5pv46hqm7pqgvpm63twlf9hszfqzqhz7aqvzqqqqqqymcd79w 
 It actually looks like (some clients) include stringified json of the event in a quoted repost so it wouldn't even have to to fetch it *maybe. Hehe, if I'm reading the right nip here (nip18) 
 Ok that's interesting, although you can only boost a note. Well technically you can boost anything, but most tools don't allow that.