Oddbean new post about | logout
▲ ▼
dk | 5 months ago (raw) | export | reply | flag +11 
 Ok, this is the best/simplest demo of Web-of-Trust I’ve seen. All software/information should work like this. nostr:note15xtj9kn0ste2z46t934ja3jqm9fvva0k9xj595e5n6n9c89rm2asanrm4f
▲ ▼
elsat | 5 months ago (raw) | root | parent | reply | flag +1 
 All glory to empanda maxi @franzap
▲ ▼
dk | 5 months ago (raw) | root | parent | reply | flag 
 How are the names of the WoT people selected? People I follow who have also used zapstore to download?
▲ ▼
elsat | 5 months ago (raw) | root | parent | reply | flag 
 Fran is “logged in” with his npub. ZS then checks his follows list against who follows app X npub. There is some WOT score. ZS surfaces people at the top of the list with the highest WOT score.
▲ ▼
dk | 5 months ago (raw) | root | parent | reply | flag 
 so it’s based on people following an npub of an account associated with the download? does it require the binary is signed by the corresponding nsec?

would be nice if there were a stronger endorsement scheme representing something like “i’ve downloaded and endorse this binary”
▲ ▼
franzap | 5 months ago (raw) | root | parent | reply | flag 
 Just to clarify, my demo is very PoC. The longer term vision for zap.store is all devs signing binaries with their own keys.

Fully agree with stronger endorsements. We currently base WoT on contact lists because it's the best we've got - but actively thinking and experimenting with ways of expressing stronger signal
▲ ▼
elsat | 5 months ago (raw) | root | parent | reply | flag +1 
 #induecourse @dk
▲ ▼
dk | 5 months ago (raw) | root | parent | reply | flag +1 
 love it!

is zap.store signing a kind of interim step to establish trust until developers are setup to sign their own binaries?
https://m.primal.net/IZsd.png
▲ ▼
elsat | 5 months ago (raw) | root | parent | reply | flag 
 💯
▲ ▼
dk | 5 months ago (raw) | root | parent | reply | flag +1 
 even nicer to see avatars. not available in the CLI PoC
https://m.primal.net/IZsj.jpg
▲ ▼
elsat | 5 months ago (raw) | root | parent | reply | flag 
 Wait until you can see, and have the option to choose from @Gigi ‘s curated list
▲ ▼
dk | 5 months ago (raw) | root | parent | reply | flag 
 @Max check it

we’ve talked Web-of-trust before, but never seen a PoC in the wild

this is a revolution
▲ ▼
franzap | 5 months ago (raw) | root | parent | reply | flag 
 Yes! 100%

Here's a note explaining further

nostr:nevent1qvzqqqqqqypzq7xwd748yfjrsu5yuerm56fcn9tntmyv04w95etn0e23xrczvvraqywhwumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctv9uq3qamnwvaz7tmwdaehgu3wd4hk6tcqyqt0txzc09542ant75ydt4r9xznh37jmer0ddlfapl8lnak7cwt45q6z6e0