Tldr “anyone with link” sucks. Anyone with nsec or gtfo imo for private content
Login to reply
Replies (2)
This is a fair point, this would break images in DMs though. It would just be a link that you couldn’t click to view.
I’ve build a POC CDN that can support 401 Unauthorised / 402 Payment Required. It’s centralised, however can support custom domains. It uses NIP98 HTTP AUTH.
I have a local version that’s more advanced, but not yet ready to release. Mostly because I’m still working out a cross-compatible payment flow for lightning - something like LSAT, but with Nostr auth instead of receipts and cookies (which can be shared).

GitHub
GitHub - blakejakopovic/nostr_paywall_example: This is an example Nostr rust project to enable '402 Payment Required' responses for requests to paid content.
This is an example Nostr rust project to enable '402 Payment Required' responses for requests to paid content. - blakejakopovic/nostr_paywall_example