News archive

September 2026

Nostr ecosystem news from September 2026.

16 entries

NIP-09 deletion requests do not prove erasure

Kind 5 is a signed deletion request, not a remote wipe. Relays and clients can honor it, but copies already fetched or stored elsewhere remain outside its reach.

September 30, 20264 min read

strfry 1.1.3 backs out an epoll teardown guard

Story

NostrRelays

strfry 1.1.3 backs out an epoll teardown guard

Two commits, two paths, and the whole release is a submodule pointer move. What comes out is an idempotency guard in WebSocket::onEnd and a skip for closed polls in the epoll dispatch loop. The fragment buffer fix from 1.1.2 stays in.

September 29, 20264 min read

Amber 6.6.6 fixes a nostrconnect parser that mangled NIP-46 secrets

Story

NostrSigner

Amber 6.6.6 fixes a nostrconnect parser that mangled NIP-46 secrets

A Kotlin default separator turned a padded base64 secret into a comma-separated fragment, and NIP-46 requires the client to reject exactly that.

September 28, 20264 min read

NIP-39 adds Bluesky and Discord as NIP-51 moves favorite follow sets

Week in review

NostrNIP-39

NIP-39 adds Bluesky and Discord as NIP-51 moves favorite follow sets

Two Nostr specifications now separate cross-platform identity claims from favorite follow sets and define how new Bluesky and Discord proofs are checked.

September 27, 20264 min read

A Nostr follow list is a complete snapshot

Story

NostrNIP-02

A Nostr follow list is a complete snapshot

A kind 3 event does not add one follow. It replaces the author's previous follow list, which makes read, modify, sign and verify the safe update sequence.

September 26, 20264 min read

Amethyst 1.16 adds BOLT12 payments and a fitness dashboard

Story

NostrAmethyst

Amethyst 1.16 adds BOLT12 payments and a fitness dashboard

Amethyst 1.16 surfaces BOLT12 offers, adds guarded BOLT11 fallback, introduces My Fitness and ships a leaner shared core.

September 24, 20263 min read

NIP-86 gains seven methods and takes over NIP-43 invites

Story

NostrNIP-86

NIP-86 gains seven methods and takes over NIP-43 invites

NIP-86 went from 25 methods to 32 between 23 and 24 September, acquired a prose description for each one, and absorbed the invite code flow that NIP-43 used to define as a kind 28935 event.

September 24, 20265 min read

Amber 6.6.5 separates backup encryption from app permissions

Story

NostrSecurity

Amber 6.6.5 separates backup encryption from app permissions

Amber now derives a dedicated backup key outside the NIP-44 derive-key namespace, preventing remembered app permissions from decrypting signer backups.

September 21, 20263 min read

Story

NostrNIP-02

NIP-02 gives petnames resolvable paths

NIP-02 now defines relative and absolute petname paths that resolve through Nostr follow lists, while leaving adoption and escaping rules open.

September 20, 20264 min read

Story

NostrNIP-02

NIP-02 limits petnames to ASCII

One day after petname paths were merged, NIP-02 gained a single sentence limiting eligible petnames to ASCII letters, numbers and underscore.

September 20, 20264 min read

Amethyst 1.15.2 loads nested NIP-22 comments earlier

Story

NostrNIP-22

Amethyst 1.15.2 loads nested NIP-22 comments earlier

Amethyst 1.15.2 adds separate root filters for nested NIP-22 comments and fixes discovery of NIP-34 pull request updates.

September 16, 20263 min read

relayer 2.2.19 fixes overlapping COUNT filters

Story

NostrNIP-45

relayer 2.2.19 fixes overlapping COUNT filters

NIP-45 says multiple COUNT filters are OR'd into one result. relayer previously counted each filter separately and added the totals, so one event matching two filters could appear twice. Version 2.2.19 adds a storage interface for an exact union count while preserving the old path for stores that do not implement it.

September 8, 20263 min read

Story

NostrNIP

NIP-78 puts custom app data behind AUTH

NIP-78 gained an AUTH section and the relay keyword. Relays SHOULD run the NIP-42 flow before touching kinds 78 and 30078, and SHOULD return them only to a client authenticated as the same pubkey that wrote them. A second paragraph tells applications to stop using these kinds as a shared interchange format.

September 4, 20265 min read

strfry 1.1.2 fixes a WebSocket memory DoS

Story

NostrRelays

strfry 1.1.2 fixes a WebSocket memory DoS

A client could keep appending WebSocket continuation frames, each one under the payload limit, and watch the relay's buffer grow without a ceiling. The 1.1.2 tag adds the missing check, clears a stale negentropy session before starting a new one with the same id, and stops the reconnect delay from blocking the event loop.

September 3, 20264 min read

NIP-84 adds i tags to highlights and loosens r

Story

NostrNIP

NIP-84 adds i tags to highlights and loosens r

The reference section of NIP-84 becomes a three-way list. Nostr events keep a and e, structured sources move to i tags per NIP-73, and r becomes the catch-all that may hold a URL or plain text. The URL-cleaning recommendation was dropped with it.

September 2, 20264 min read

Story

NostrNIP

NIP-67 adds an auth hint to EOSE

NIP-67's hint array gains a third value. An EOSE carrying "auth" tells the client that more stored events are waiting behind NIP-42 authentication, and the relay must have sent the challenge before saying so.

September 1, 20264 min read