Yeah. But you can still be sent a fake email from a genuine address if their outbound server is hacked.
I would expect that any competent team uses something like AWS SES rather than some cheapo provider. Or they self-host.
Also, require DKIM, *and keep your own keys*.
semisol
npub122…cgrkj
2026-09-11 02:17:57 GMT
in reply to nevent1q…3n7h
Author Public Key
npub12262qa4uhw7u8gdwlgmntqtv7aye8vdcmvszkqwgs0zchel6mz7s6cgrkjPublished at
2026-09-11 02:17:57 GMTEvent JSON
{
"id": "33ec85c63ef6e56f908837032e0a7da967782515ca7742dd8939223444ac5949",
"pubkey": "52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"created_at": 1789093077,
"kind": 1,
"tags": [
[
"e",
"0000044f90c598e796caadff4473bfabecfcf9efe49616a22f6dd19e7b6a82db",
"wss://nos.lol",
"root"
],
[
"e",
"00000fbb741cd1e8bf65218532925956ff6beae3ccec5645c33b32854e56e1f3",
"wss://nostr.land",
"reply",
"010df0c948fe9ab54d2cb7ea420ffa08d57958981b6ea68e83aaa7eb2dd3f05a"
],
[
"p",
"010df0c948fe9ab54d2cb7ea420ffa08d57958981b6ea68e83aaa7eb2dd3f05a"
],
[
"client",
"Damus"
]
],
"content": "Yeah. But you can still be sent a fake email from a genuine address if their outbound server is hacked.\n\nI would expect that any competent team uses something like AWS SES rather than some cheapo provider. Or they self-host.\n\nAlso, require DKIM, *and keep your own keys*.",
"sig": "ba0b348acf17898b0bf292c8c8434a624906412e0f84616a022c341f9402c3a24bc52c1656f1077068ab79688f60cafc8f947af7a2c92b261089c141691abcbe"
}