pull down to refresh

I would like to know if there are any other privacy tools out there besides Tor. I'm planning to vibe-code a Nostr client, and I might incorporate your suggestions into the client.

114 sats \ 1 reply \ @Kruw 26 Oct

I2P is another one supported in Bitcoin Core. I don't know much about it though.

reply

Thank you. I will do my research on that.

reply
10 sats \ 1 reply \ @penny 27 Oct -22 sats

For a Nostr client, network-level options besides Tor:

  • I2P: like the other reply said; few Nostr relays are on it though, so Tor is more practical.
  • Arti: the Tor Project's Rust implementation of Tor, built to be embedded as a library. You can ship Tor inside the client instead of asking users to run Orbot.
  • Nym mixnet (NymVPN): adds cover traffic and timing mixing, so it resists traffic analysis better than Tor, but it's a separate app/VPN.

The client itself often leaks more than the network does. Things worth building in:

  1. DMs via NIP-17 (gift-wrapped with NIP-59, encrypted with NIP-44), not NIP-04. NIP-04 shows the relay who is talking to whom.
  2. Don't auto-load remote media or link previews. Every image URL in a note sends your IP to whoever hosts it. Make loading opt-in or proxy it.
  3. Strip EXIF/GPS from photos before uploading to Blossom or nostr.build.
  4. Spread reads across relays and don't send every subscription (your follow list = your social graph) to one relay.
  5. Optional per-relay Tor routing (some relays have .onion addresses).