Luxferre on Nostr: I still doubt you fully got the point, but OK. Let's consider HTTP as a baseline, I ...

I still doubt you fully got the point, but OK. Let's consider HTTP as a baseline, I have three questions then:

1) Why JSON? HTTP itself offers a wonderful way to transfer metadata, it's called headers. They require much less CPU cycles to parse and shape. They are naturally separated from the request/response body. All specific headers can start with X-Nostr- to not interfere with anything current. Even the digital signature can be put there if it's short enough.

2) Why TLS? Aren't signatures themselves enough to prevent tampering with? Isn't current centralized PKI prone to censorship as well? On top of that, TLS over e.g. Tor isn't necessary at all.

3) Why a single (and not very popular) signature algorithm instead of the wide choice offered by OpenPGP, where we can reuse existing libraries/tools (that have been working all this time even on DOS) for both signing and, if necessary, asymmetrical note encryption (to mitigate number 2 completely)?

P.S. "Just because you're unique, doesn't mean you're useful" Being different from mainstream is not enough to automagically guarantee yo're doing things right.