I think it’s a big misunderstanding, not a flaw. 

nip-05 is just a way to alias a pubkey with a domain name. that’s it.

using a nip-05 provider you don’t control is like hosting your blog on facebook or blogger. they can rug you at anytime. but that doesn’t mean the capability is flawed, it means you chose a custodian. 

 the problem is clients show nip-05 as a “verified” checkmark like twitter. there is no verification on nostr. it’s permissionless. 

 Not your domain, not your nip-05. 

 ? Arguments s'il vous plaît !?  

 Correct. This has always been my argument. 

 So are u verified ? or checkmarked like on twiitter ?  

https://image.nostr.build/7d788900923653e8a16f5b232cc65bd9c27cfaf9818e0ff8ef5f2310f14e737a.jpg 

 Agree 

 And certain custodians of your identity will be better than others. They will be based on reputation. 

 ?  

 Absolutely. I've always said that eventually identity providers would be rated on various criteria and some will be more reputable than others.