Oddbean

IVPN is now on Nostr. Following a conversation at Baltic Honeybadger with @Derek Ross regarding the pros and cons of 'company operated accounts on Nostr' + hearing talks on the future of free speech online, we are convinced that this is the right place (or rather, protocol) to be for us. We've maintained a reserved, low-key presence on other social channels for many years. We as a team and as individuals prefer not to shout louder in a cacophony. While some companies thrive on oversharing for engagement and treating social communities as marketing funnels, such tactics don't align with our straightforward, no-bullshit approach. For Nostr we are trying something different, without any compromise on these values. Expect more posts with direct opinions, in-depth analysis, privacy/VPN consultation and anything else that contributes to the community. To anyone we've met at Bitcoin and other conferences over the years - hello! Nice to see you here. We are ready to continue the hundreds of conversations we had around trust, transparency, sovereignty, open-source ideals, LN merchant adoption, circular economy for Bitcoin and new radical ideas. Reach out in public or private if you have any questions, ideas or suggestions. Let's do this!

They did speak to me in Riga. They do have the correct public key listed in their nostr.json file. It's probably a CORS issue. It's almost always a CORS issue. https://www.ivpn.net/.well-known/nostr.json

Finally I did figure out the reason why verification fails - it is due to redirect from ivpn.net to www.ivpn.net ``` $ curl -I https:///ivpn.net/.well-known/nostr.json HTTP/2 301 server: nginx date: Mon, 30 Sep 2024 19:55:13 GMT content-length: 0 location: https://www.ivpn.net/.well-known/nostr.json x-varnish: 953443322 content-security-policy: default-src 'self' *.ivpn.net;img-src * data:;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ivpn.net *.braintreegateway.com *.braintree-api.com *.paypal.com *.paypalobjects.com *.cardinalcommerce.com;style-src 'self' 'unsafe-inline' *.ivpn.net;connect-src 'self' *.ivpn.net *.cardinalcommerce.com *.braintree-api.com *.braintreegateway.com *.paypal.com api.coingecko.com;frame-src 'self' *; strict-transport-security: max-age=63072000; includeSubdomains; preload x-content-type-options: nosniff ```