Default avatar
page394 2 years ago
Tldr “anyone with link” sucks. Anyone with nsec or gtfo imo for private content

Replies (2)

This is a fair point, this would break images in DMs though. It would just be a link that you couldn’t click to view.
I’ve build a POC CDN that can support 401 Unauthorised / 402 Payment Required. It’s centralised, however can support custom domains. It uses NIP98 HTTP AUTH. I have a local version that’s more advanced, but not yet ready to release. Mostly because I’m still working out a cross-compatible payment flow for lightning - something like LSAT, but with Nostr auth instead of receipts and cookies (which can be shared).