F26-NS: Yes
Rationale
The selected nostr-rs-relay implementation provides a native author whitelist. With pay-to-relay disabled, db.rs rejects events whose verified author is absent from that list before persistence and broadcast. This protects the relay-to-subscriber links from redistribution of those unauthorized events.
Assessment method
Primary normative source and selected adjacency-policy analysis; no execution
Source context
Pinned implementation and selected-role analysis
Outstanding qualification
Configure a nonempty pubkey_whitelist on both selected relays, disable pay-to-relay and start with a clean event store. This is event-author admission, not authenticated publishing connections, and needs no NIP-42. Incoming WebSocket bytes, signature verification, rejection notices and subscription/read traffic remain exposed; authorized-author floods are not contained by this check. No runtime test or general IP-link protection is claimed.
Public sources
- https://raw.githubusercontent.com/scsibug/nostr-rs-relay/b5c1f642e4f4c3b9c54f5d18d66f4c53642076b4/src/db.rs
- https://raw.githubusercontent.com/scsibug/nostr-rs-relay/b5c1f642e4f4c3b9c54f5d18d66f4c53642076b4/src/db.rs
- https://raw.githubusercontent.com/scsibug/nostr-rs-relay/b5c1f642e4f4c3b9c54f5d18d66f4c53642076b4/src/server.rs
- https://raw.githubusercontent.com/scsibug/nostr-rs-relay/b5c1f642e4f4c3b9c54f5d18d66f4c53642076b4/config.toml
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round451.html
- round451-sources.json