Oddbean new post about login | logout unruggable/sovereign addressability -- makes all the difference
say for example I am running a cashu mint from whatever location, I have a contract with my ISP providing me internet access so my cashu mint can be online/discoverable. this ISP has given me an IP address I can be reached at. if I think decide I will not advertise my IP, and only be discoverable through the mints npub, wouldn't all traffic still be going to and from the ISP anyways? meaning they can just have a look at the packets, see what's going on(roughly) and block access?
this is why they will put off actually enabling full IPv6 for as long as they can to keep us trapped in LANs behind NAT
even with ipv6, I am still stuck under the ISP right? they control what I can do surely
TLS all looks the same... if an IP appears to not be online from you, but you can check from a third party it is online, then you can prove the ISP is filtering your traffic, and then they have a game of whack-a-mole when you move to using a VPN unfortunately, yes, ISPs have a lot of power, and mostly they play fair to keep customers but ultimately if the government orders them to do shit, even in secret, you have to defend yourself it's shitty, but that's the world we live in currently... a total farce of pretense of civility, with vicious, satanic evil behind the curtain
also, that's the thing going from 32 bits to 128 is such a big jump that it goes from whack a mole game to infinity whack a mole that's why we don't have ipv6 everywhere yet it's been 30 years since the standard was mostly finalised, and we are still waiting for everyone to stop running 10 year old firmware that didn't implement it why? because fuck you, obviously
For one thing, ISPs aren't the only way to network. Mesh networks, for example, don't rely on ISPs. Also, encrypted traffic solves a lot of that. If you connect, peer-to-peer, to a "discovery gateway" of sorts (maybe this is how mints are going to be structured, I'm not sure) and that gateway helps you connect p2p to other users, then all your ISP is seeing is encrypted packets between IP addresses. Even IP blacklists at the ISP level wouldn't be a silver bullet for them as gateways could move as necessary. But if things are THAT bad, then yea mesh networks are the answer. Example: nycmesh.net - they happen to also connect outside via ISP, but local-to-the-mesh traffic does not.
The encrypted requests go to many Nostr relays, you can run your mint in your own home server and have a service just looking at requests in nostr for the mint, then you send the response also through Nostr. For your isp your mint is no different that you just posting or sending DMs on Nostr.