WoT = Deplatforming ?

The architectural concept of a Web of Trust (WoT) is not inherently a centralization scam, but centralized browser extensions that implement it almost always devolve into privacy nightmares by design.

To understand why this happens, it helps to separate the abstract mathematical concept from how centralized corporations weaponize it.

The Conflict of Centralized WoT Extensions

When a single company hosts a Web of Trust extension, it requires a centralized database to aggregate every user’s ratings, reviews, and trust relationships. By definition, this architecture creates a catastrophic flaw:

• Surveillance Loophole: To tell you if a website or user is “safe” in real-time, the extension must look at the central database every time you click a link or load a page. The central server now logs your exact browsing history and timestamps.
• The Incentive to Monetize: Running these global databases costs money. Because users rarely want to pay subscriptions for safety extensions, the company looks for alternative revenue.
• The Data Broker Pipeline: Your clickstream history is incredibly valuable. Centralized entities inevitably realize that selling “anonymized” user data to brokers is the fastest way to turn a free security utility into a multi-million dollar business.

Why Nostr’s WoT is Mathematically Different

The reason developers use the term “Web of Trust” for Nostr without it being an anti-privacy scam is because Nostr removes the central server entirely.

1. Local Computation: In Nostr, your extension or client downloads public cryptographic signatures (who follows whom) and calculates the math locally on your device. It does not ping a central company telling them what you are looking at.
2. No Clickstream Tracking: A Nostr WoT filters open-source social media feeds and payment keys—it does not monitor your general web traffic or the URLs you visit across the internet.
3. Cryptographic Identity: You do not register an account with a company email or phone number. Your identity is just a cryptographic public key.

The Bottom Line

If a browser extension asks you to trust a centralized company to manage a global registry of who is “good” or “bad,” it is almost always a data-harvesting operation in disguise.

The concept of a Web of Trust only honors user privacy when it is built on an open, decentralized protocol where the user controls the keys and computes the graph locally.

Note @aos : the Nostr client @nostrich https://nostrich.org deplatformed me when I first sent this article to relays. I’m on https://ditto.pub now.