Sure auth guarantees the user, but relays can likely, pretty easily infer the user based on their req patterns, especially from known clients. Unfortunately, I think we have to entrust relays with our feed and location privacy, which is why I'm so against outbox client model.

Replies (2)

Well, right, but so far, if you need to verify it with a challenge, an irrevocable proof that it was you and no one else, anyone can build a filter that looks like you, but no one can fake your real signature. And I agree, the outbox model is pretty bad in this regard, the same or even worse than Facebook Pixels, xD.