Ok, it seems that the option of activating Tor for .onion relays is the bare minimum we should do.
The question is now, as a project, do we want to offer more privacy straight out of the box or not.
I am leaning towards also using Tor for:
1. Relays gathered from the Outbox model that are not in the user's relay list.
2. All relays that require Auth (no IP-Pubkey link)
3. All DM relays
By default.
More ideas are welcome.
Privacy straight out the gate
nostr:nevent1qqsg9gmue9m6eylt36djrwmx2amk3qlytd034mleesxrezu4nc0he0qpz9mhxue69uhkummnw3ezuamfdejj7q3qgcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqxpqqqqqqz0g74j5
Privacy by default
nostr:nevent1qqsg9gmue9m6eylt36djrwmx2amk3qlytd034mleesxrezu4nc0he0qppemhxue69uhkummn9ekx7mp0qgsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqrqsqqqqqppqyejv
Always more privacy
nostr:nevent1qqsg9gmue9m6eylt36djrwmx2amk3qlytd034mleesxrezu4nc0he0qppemhxue69uhkummn9ekx7mp0qgsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqrqsqqqqqppqyejv
Don't forget that there are places where Tor is blocked.
Aren't there technical solutions that help those people access Tor regardless?
Configurability is key. What if the user is inside a network that offers transparent .onion resolution and routing? Never assume that .onion has to enable in-app Tor automatically, better allow the user to choose.
Then he can just turn Orbot off.
Applauses for this guy. Native onion relays are a next level cypherpunk move.
nostr:nevent1qqsg9gmue9m6eylt36djrwmx2amk3qlytd034mleesxrezu4nc0he0qpz9mhxue69uhkummnw3ezuamfdejj7q3qgcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqxpqqqqqqz0g74j5
Anonymity loves company, thus privacy ought to be the default.
Vitor, enable Snowflake brigdes if you want to make Amethyst privacy-friendly. Snowflake is perfect for circumventing censorship.
Has Tor connectivity improved? I gave up using it completely a year ago because connections were so unreliable. Worse, Android only supports one VPN per user profile, so it's either apps like Orbot or no VPN at all since only one VPN can be be installed (per Android user profile).
Oddbean new post about login | logout