Sign up to save your podcasts
Or
Share Nostr Compass Podcast #22
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
Nostr Compass Podcast #22
### News
- **0:00 Intro**
This episode follows Nostr Compass #22 across top stories, shipping releases, in-development work, five new NIP proposals, and deep dives on NIP-78 and NIP-98.
- **0:20 Nostr VPN v4.0.10 — eight releases, full FIPS migration**
Nostr VPN shipped v4.0.1 through v4.0.10, with v4.0.8 swapping AEAD to BoringSSL ChaCha20-Poly1305 in ring 0.17 for roughly 2x TCP throughput. The week also rebuilt device pairing in v4.0.1, improved LAN discovery in v4.0.2, fixed NAT traversal in v4.0.6, added sendmmsg batching in v4.0.9, and overhauled pairing UX in v4.0.10.
- **3:18 Marmot / White Noise — user blocking, video attachments, 31 MDK PRs**
White Noise v2026.5.7+24 completes Marmot user blocking across invites, timelines, search, and notifications, with video attachments and offline notice coverage. Supporting work spans 31 merged PRs including MDK PR #258 and frontend fixes in PR #653, PR #644, and PR #635.
- **5:31 Grain v0.6.0 — NIP-40, NIP-50, NIP-70, NIP-45**
Grain v0.6.0 adds NIP-40 expiration, NIP-50 search, NIP-70 protected events, and NIP-45 count queries, plus safer defaults and improved backpressure handling.
### Releases
- **7:33 Citrine v3.0.0-pre1 — built-in Tor, relay aggregation, Negentropy**
Citrine v3.0.0-pre1 adds built-in Tor, relay aggregation, and NIP-77 Negentropy sync in PR #139, with Tor URL routing in PR #137 and battery improvements in PR #132.
- **11:51 Amber v6.1.0-pre2 — new-app connection flow improvements**
Amber v6.1.0-pre2 fixes bunker dialog lifecycle, invalid-request handling, intent rate limiting, and signing hot-path leaks in PR #430.
- **13:38 Alby Hub v1.22.2 — AI & Agents page, Core Lightning support**
Alby Hub v1.22.2 adds an AI and Agents page for MCP-compatible tools, on-chain wallet mode, transaction label improvements, settings redesign, and Core Lightning backend support alongside LND and LDK.
- **14:54 Mostro — concurrent taker bonds, mostro-core v0.11.0**
Mostro merged concurrent taker bonds in PR #733 with spec alignment in PR #735. mostro-core v0.11.0 adds bond actions and statuses in PR #144 and PR #143, with mostro-cli v0.15.0 following.
- **16:29 Jumble — five releases, grouped notifications, Mac support**
Jumble shipped v26.5.2 through v26.5.6 with grouped notifications, macOS zip auto-update support, emoji picker, recent search, and account persistence fixes after moving to a stable app:// origin.
- **17:42 Nostrord — NIP-29 group share, media upload, Arch Linux packages**
Nostrord shipped v1.0.0 through v1.0.2 with Arch packages in PR #44, media paste in PR #46, and NIP-29 group sharing in PR #49.
- **19:37 FIPS v0.3.0 — cross-platform, Nostr peer discovery, LAN gateway**
FIPS v0.3.0 adds Nostr-mediated peer discovery with STUN-assisted NAT traversal via kind 37195 adverts and NIP-59 signaling, plus a fips-gateway binary for unmodified LAN hosts and the same BoringSSL throughput improvements contributed from Nostr VPN.
- **23:58 Camelus v1.10.1 — desktop builds for Windows & Linux**
Camelus v1.10.1 adds Windows and Linux desktop builds beyond its Android distribution.
- **24:36 Flotilla v1.8.0 — video calls, email rendering, room mentions**
Flotilla 1.8.0 adds video calls in voice rooms, HTML email rendering via welshman updates, room mentions, expanded space search, native invite sharing, and always-visible calendar event dates in NIP-29 rooms.
- **26:27 Calendar by Formstr v1.5.1 — appointment scheduling, Android sync**
Calendar by Formstr shipped v1.5.0 and v1.5.1 with appointment scheduling in PR #89, Android calendar sync in PR #123, notifications in PR #130, and relay publish feedback in PR #118.
### Project Updates
- **29:57 Amethyst — scheduled posts, NIP-9A community rules, desktop local relay**
Amethyst merged 78 PRs including scheduled posts in PR #2765, embedded desktop relay support in PR #2841, and first client-side NIP-9A enforcement in PR #2798 through PR #2800. Security and media updates include log redaction in PR #2812 and NIP-92 HLS publishing in PR #2821.
- **33:57 Shopstr — MCP audit logging, session security**
Shopstr added MCP audit logging in PR #456, session pinning and TTL eviction in PR #477, and reserved slug protections in PR #476.
- **34:48 Dart NDK — web support, seal signature verification**
Dart NDK added web cache persistence in PR #571, NIP-59 seal verification in PR #595, and public tag parsing fixes in PR #597.
- **35:23 rust-nostr — tag refactor, proxy connection rework**
rust-nostr merged tag normalization in PR #1347, Proxy connection rework in PR #1351, and multi-filter subscription verification fixes in PR #1349.
- **35:58 Sprout v0.0.10 & v0.0.11**
Sprout shipped v0.0.10 and v0.0.11 with mention autocomplete, image download support, and agent error-handling fixes.
- **36:17 Clave — multi-account NostrConnect rollout**
Clave promoted Connect to a top-level tab in PR #52 and fixed a per-account bunker connection-cap bypass with three-layer enforcement.
- **38:15 Tamagostrich — NIP-78 Tamagotchi with sats rewards**
Tamagostrich is a browser pet game where state syncs via NIP-78 kind 30078 events and milestone rewards pay out through NIP-47 to the user’s lud16 address.
### NIP Updates
- **40:35 NIPs: PR #2331 — NIP-9A Verifiable Community Rules — Open**
PR #2331 proposes NIP-9A kind 34551 machine-readable community rules with client-side pre-send validation, complementing NIP-72 community definitions.
- **42:55 NIPs: PR #2335 — Reservation Events for Nostr Marketplaces — Open**
PR #2335 defines kind 32122 reservations, kind 1326 transition audits, and kind 32124 reviews, with private negotiation over NIP-59 gift wraps.
- **45:19 NIPs: PR #2334 — Escrow Services for Nostr Marketplaces — Open**
PR #2334 proposes kind 30303 escrow service advertisements and kind 17388 trusted-provider declarations for EVM-settled marketplace flows.
- **46:56 NIPs: PR #2333 — Accommodation Listings for NIP-99 — Open**
PR #2333 extends NIP-99 listings with H3 geospatial tags and accommodation-specific profile fields for short-term rentals.
- **48:00 NIPs: PR #2332 — NIP-BC Onchain Zaps (kind 8333) — Open**
PR #2332 proposes kind 8333 onchain zap receipts using Taproot addresses derived from Nostr pubkeys, with optional inline SPV proof tags and signPsbt extensions for NIP-07 and NIP-46.
### NIP Deep Dives
- **51:24 NIP Deep Dive: NIP-78 (App-Specific Data)**
NIP-78 standardizes kind 30078 parameterized replaceable events where a `d` tag scopes application-specific JSON or text for cross-device sync. Public data can remain plaintext while private payloads use NIP-44 or NIP-04 encryption, and apps avoid collisions by prefixing `d` tags with application names. Production users include Tamagostrich, Wisp, NosPress, and multiple client settings sync implementations.
- **53:32 NIP Deep Dive: NIP-98 (HTTP Auth)**
NIP-98 defines kind 27235 signed HTTP auth events sent as `Authorization: Nostr` headers, binding method, URL, and optional body hash for replay-resistant API access without passwords. Servers authenticate any pubkey holder without prior registration, and the pattern is used in Blossom BUD-01, Routstr, Sprout, Clave, Alby Hub, and Nostr.build uploads.
View all episodes
By Nostr Compass### News
- **0:00 Intro**
This episode follows Nostr Compass #22 across top stories, shipping releases, in-development work, five new NIP proposals, and deep dives on NIP-78 and NIP-98.
- **0:20 Nostr VPN v4.0.10 — eight releases, full FIPS migration**
Nostr VPN shipped v4.0.1 through v4.0.10, with v4.0.8 swapping AEAD to BoringSSL ChaCha20-Poly1305 in ring 0.17 for roughly 2x TCP throughput. The week also rebuilt device pairing in v4.0.1, improved LAN discovery in v4.0.2, fixed NAT traversal in v4.0.6, added sendmmsg batching in v4.0.9, and overhauled pairing UX in v4.0.10.
- **3:18 Marmot / White Noise — user blocking, video attachments, 31 MDK PRs**
White Noise v2026.5.7+24 completes Marmot user blocking across invites, timelines, search, and notifications, with video attachments and offline notice coverage. Supporting work spans 31 merged PRs including MDK PR #258 and frontend fixes in PR #653, PR #644, and PR #635.
- **5:31 Grain v0.6.0 — NIP-40, NIP-50, NIP-70, NIP-45**
Grain v0.6.0 adds NIP-40 expiration, NIP-50 search, NIP-70 protected events, and NIP-45 count queries, plus safer defaults and improved backpressure handling.
### Releases
- **7:33 Citrine v3.0.0-pre1 — built-in Tor, relay aggregation, Negentropy**
Citrine v3.0.0-pre1 adds built-in Tor, relay aggregation, and NIP-77 Negentropy sync in PR #139, with Tor URL routing in PR #137 and battery improvements in PR #132.
- **11:51 Amber v6.1.0-pre2 — new-app connection flow improvements**
Amber v6.1.0-pre2 fixes bunker dialog lifecycle, invalid-request handling, intent rate limiting, and signing hot-path leaks in PR #430.
- **13:38 Alby Hub v1.22.2 — AI & Agents page, Core Lightning support**
Alby Hub v1.22.2 adds an AI and Agents page for MCP-compatible tools, on-chain wallet mode, transaction label improvements, settings redesign, and Core Lightning backend support alongside LND and LDK.
- **14:54 Mostro — concurrent taker bonds, mostro-core v0.11.0**
Mostro merged concurrent taker bonds in PR #733 with spec alignment in PR #735. mostro-core v0.11.0 adds bond actions and statuses in PR #144 and PR #143, with mostro-cli v0.15.0 following.
- **16:29 Jumble — five releases, grouped notifications, Mac support**
Jumble shipped v26.5.2 through v26.5.6 with grouped notifications, macOS zip auto-update support, emoji picker, recent search, and account persistence fixes after moving to a stable app:// origin.
- **17:42 Nostrord — NIP-29 group share, media upload, Arch Linux packages**
Nostrord shipped v1.0.0 through v1.0.2 with Arch packages in PR #44, media paste in PR #46, and NIP-29 group sharing in PR #49.
- **19:37 FIPS v0.3.0 — cross-platform, Nostr peer discovery, LAN gateway**
FIPS v0.3.0 adds Nostr-mediated peer discovery with STUN-assisted NAT traversal via kind 37195 adverts and NIP-59 signaling, plus a fips-gateway binary for unmodified LAN hosts and the same BoringSSL throughput improvements contributed from Nostr VPN.
- **23:58 Camelus v1.10.1 — desktop builds for Windows & Linux**
Camelus v1.10.1 adds Windows and Linux desktop builds beyond its Android distribution.
- **24:36 Flotilla v1.8.0 — video calls, email rendering, room mentions**
Flotilla 1.8.0 adds video calls in voice rooms, HTML email rendering via welshman updates, room mentions, expanded space search, native invite sharing, and always-visible calendar event dates in NIP-29 rooms.
- **26:27 Calendar by Formstr v1.5.1 — appointment scheduling, Android sync**
Calendar by Formstr shipped v1.5.0 and v1.5.1 with appointment scheduling in PR #89, Android calendar sync in PR #123, notifications in PR #130, and relay publish feedback in PR #118.
### Project Updates
- **29:57 Amethyst — scheduled posts, NIP-9A community rules, desktop local relay**
Amethyst merged 78 PRs including scheduled posts in PR #2765, embedded desktop relay support in PR #2841, and first client-side NIP-9A enforcement in PR #2798 through PR #2800. Security and media updates include log redaction in PR #2812 and NIP-92 HLS publishing in PR #2821.
- **33:57 Shopstr — MCP audit logging, session security**
Shopstr added MCP audit logging in PR #456, session pinning and TTL eviction in PR #477, and reserved slug protections in PR #476.
- **34:48 Dart NDK — web support, seal signature verification**
Dart NDK added web cache persistence in PR #571, NIP-59 seal verification in PR #595, and public tag parsing fixes in PR #597.
- **35:23 rust-nostr — tag refactor, proxy connection rework**
rust-nostr merged tag normalization in PR #1347, Proxy connection rework in PR #1351, and multi-filter subscription verification fixes in PR #1349.
- **35:58 Sprout v0.0.10 & v0.0.11**
Sprout shipped v0.0.10 and v0.0.11 with mention autocomplete, image download support, and agent error-handling fixes.
- **36:17 Clave — multi-account NostrConnect rollout**
Clave promoted Connect to a top-level tab in PR #52 and fixed a per-account bunker connection-cap bypass with three-layer enforcement.
- **38:15 Tamagostrich — NIP-78 Tamagotchi with sats rewards**
Tamagostrich is a browser pet game where state syncs via NIP-78 kind 30078 events and milestone rewards pay out through NIP-47 to the user’s lud16 address.
### NIP Updates
- **40:35 NIPs: PR #2331 — NIP-9A Verifiable Community Rules — Open**
PR #2331 proposes NIP-9A kind 34551 machine-readable community rules with client-side pre-send validation, complementing NIP-72 community definitions.
- **42:55 NIPs: PR #2335 — Reservation Events for Nostr Marketplaces — Open**
PR #2335 defines kind 32122 reservations, kind 1326 transition audits, and kind 32124 reviews, with private negotiation over NIP-59 gift wraps.
- **45:19 NIPs: PR #2334 — Escrow Services for Nostr Marketplaces — Open**
PR #2334 proposes kind 30303 escrow service advertisements and kind 17388 trusted-provider declarations for EVM-settled marketplace flows.
- **46:56 NIPs: PR #2333 — Accommodation Listings for NIP-99 — Open**
PR #2333 extends NIP-99 listings with H3 geospatial tags and accommodation-specific profile fields for short-term rentals.
- **48:00 NIPs: PR #2332 — NIP-BC Onchain Zaps (kind 8333) — Open**
PR #2332 proposes kind 8333 onchain zap receipts using Taproot addresses derived from Nostr pubkeys, with optional inline SPV proof tags and signPsbt extensions for NIP-07 and NIP-46.
### NIP Deep Dives
- **51:24 NIP Deep Dive: NIP-78 (App-Specific Data)**
NIP-78 standardizes kind 30078 parameterized replaceable events where a `d` tag scopes application-specific JSON or text for cross-device sync. Public data can remain plaintext while private payloads use NIP-44 or NIP-04 encryption, and apps avoid collisions by prefixing `d` tags with application names. Production users include Tamagostrich, Wisp, NosPress, and multiple client settings sync implementations.
- **53:32 NIP Deep Dive: NIP-98 (HTTP Auth)**
NIP-98 defines kind 27235 signed HTTP auth events sent as `Authorization: Nostr` headers, binding method, URL, and optional body hash for replay-resistant API access without passwords. Servers authenticate any pubkey holder without prior registration, and the pattern is used in Blossom BUD-01, Routstr, Sprout, Clave, Alby Hub, and Nostr.build uploads.