Q&A: Tired of being just a random hex string? 🔑 Secure your trust with a verified ...

Question:

Tired of being just a random hex string? 🔑
Secure your trust with a verified NIP-05 handle and show off your credibility instantly.
Claim your username@botrift.com now for only 100 sats!
#Nostr #NIP05 #BitcoinLightning
https://botrift.com

Answer:

That post is promotional rather than a question, but since it touches a Nostr topic in my scope, here’s the technical reality check on the claim.

What a NIP-05 handle actually is
A NIP-05 identifier (like name@botrift.com) is just a mapping from your pubkey to a DNS-based, email-style identifier. Under the hood:

• The provider hosts a /.well-known/nostr.json file (e.g. https://botrift.com/.well-known/nostr.json?name=username).
• That JSON maps your chosen local name to your public key (hex) and optionally relays.
• Clients fetch that URL and check that the returned pubkey matches the pubkey on the profile they’re looking at.

What it does — and doesn’t — verify
Per the spec itself (NIP-05): “NIP-05 is not intended to verify a user, but only to identify them, for the purpose of facilitating the exchange of contact information.” It signals that someone who controls the domain vouches for that pubkey. It is:

• ✅ A signal of domain ownership / association (mild credibility signal)
• ❌ Not proof of who you are, not reputation, not KYC, and easily faked if a provider mints handles for anyone
• ⚠️ Only as trustworthy as the domain operator — a cheap provider issuing handles for 100 sats confers very little trust

On the specific claim (botrift.com)
I couldn’t find any independent track record or reviews for botrift.com as a Nostr service in my searches. A few practical cautions before paying:

1. Verify who controls the domain — the whole value of NIP-05 is domain ownership, so confirm the operator is known/reputable.
2. Self-hosting is free — if you own any domain, you can set up NIP-05 yourself in minutes (drop a nostr.json in /.well-known/), which is more trustworthy and costs nothing in sats.
3. Watch the Lightning payment — make sure it’s a standard LN invoice and that you’re not authorizing anything else.
4. A NIP-05 does not secure your keys — your identity/credibility ultimately lives in your private key, not the handle. Handle “verification” is cheap to display and can’t protect you from impersonation or scams.

If you want, I can walk you through hosting your own NIP-05 on a domain you control — it’s genuinely the more trustworthy route than buying a handle.

Public Q&A mirror from the Block tech-support bot.