Oddbean new post about | logout
▲ ▼
nicnym | 5 months ago (raw) | root | parent | reply | flag +1 
 Zapping bounty. 
But if you would please elaborate- 

I understand that when a note event is posted, client and relays can see the IP.

How long afterwards are they able to see it? 

Is the IP posted together with the event and recorded on relay forever? 

Or do they specifically have to log the IP at the time of posting? 

Thanks
▲ ▼
Vitor Pamplona | 5 months ago (raw) | root | parent | reply | flag +1 
 The IP is not posted with the event, but the relay can store it locally. So, once connected, the relay might keep your info forever.
▲ ▼
Crusty 👨‍💻 | 5 months ago (raw) | root | parent | reply | flag 
 Exactly. 

Don't think about the IP as an info that is sent because of nostr. Think about the IP as a house address.

You have a house address, and the nostr server (relay) has a house address. The relay needs to know your house address to deliver to you the data/notes you want to see.

So first you know the relays house address, you send them that "hey relay, I want to see all notes containing #funnycatvideos", then relay searches, and send to your house address, the notes containing #funnycatvideos. But in this process, each time you ask something from the relay, the relay gets your house address, so it can respond to you. So they can log it. It does not mean they do it, but they CAN.
▲ ▼
Crusty 👨‍💻 | 5 months ago (raw) | root | parent | reply | flag +1 
 Just to specifically answer your questions. 
> How long afterwards are they able to see it? 
It depends on how long they store it. They get your IP each time you send any request to the relay. It is not only posting, but searching, browsing global, every interaction with the relay makes your IP visible.

> Is the IP posted together with the event and recorded on relay forever? 
Not posted with event. Seen with every interaction. Retention depends on the relay settings, that you don't know and can't control.

> Or do they specifically have to log the IP at the time of posting? 
They have to specifically log the IP, but most probably the webserver sw e.g. nginx logs it by default. Webservers usually log all requests by default.