Back to matrix

F21-NS: Yes

Rationale

For the explicitly selected event-author-to-reader role, NIP-01 binds the author public key to the signed event content; nostr-tools verifyEvent checks the canonical event hash and Schnorr signature. The verified event supplies its author identity to the receiving application. This authenticates the communication item's author, not the current relay, WebSocket publisher or reader, and does not establish freshness or live possession.

Assessment method

Documentary/code analysis

Source context

Primary specification and application API

Outstanding qualification

API reviewed at nostr-tools master/pure.ts as consulted on 2026-10-14; pin a commit before executable qualification. Verify fresh wire objects, retain immutable verified values, and test signature/key/content changes. verifyEvent caches its result on the object; mutation followed by reuse of that cache is not revalidation. No live publisher authentication or replay protection credited.

Public sources