Discovering and downloading (or streaming) blobs from other servers isn't part of the blossom spec but its something I added to my blossom-server implementation
By default the example config has it setup to check cdn.satellite.earth and nostr 1063 events to find blobs, but if you want you can turn it off in the config https://github.com/hzrd149/blossom-server/blob/master/config.example.yml#L15-L30
I don't know if there are any security implications of downloading a blob. but its possible an attacker could flood a server by asking it to download everything from another server
hzrd149
npub1ye…pknpr
2024-05-20 20:56:44
in reply to nevent1q…aary
Author Public Key
npub1ye5ptcxfyyxl5vjvdjar2ua3f0hynkjzpx552mu5snj3qmx5pzjscpknprPublished at
2024-05-20 20:56:44Event JSON
{
"id": "216f8241b5a6f1a7938f757b1b137ffba60e642ab26a1fd80cb0b173e016ddc8",
"pubkey": "266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5",
"created_at": 1716238604,
"kind": 1,
"tags": [
[
"e",
"a7ae7994e33c31a39c531050fa17134d1561c2334374a089295831ed60c7d7d9",
"",
"root"
],
[
"e",
"89793e768d4273be468f3ffa2bba2a4dce553d7689ca9ec20f92e64122b03d0e",
"",
"reply"
],
[
"p",
"40b9c85fffeafc1cadf8c30a4e5c88660ff6e4971a0dc723d5ab674b5e61b451",
"",
"mention"
],
[
"p",
"434f97993627f1e61f14eeaf60caa8cfdcec10a592caff8250c825252d548c15",
"",
"mention"
],
[
"p",
"55f04590674f3648f4cdc9dc8ce32da2a282074cd0b020596ee033d12d385185",
"",
"mention"
]
],
"content": "Discovering and downloading (or streaming) blobs from other servers isn't part of the blossom spec but its something I added to my blossom-server implementation\nBy default the example config has it setup to check cdn.satellite.earth and nostr 1063 events to find blobs, but if you want you can turn it off in the config https://github.com/hzrd149/blossom-server/blob/master/config.example.yml#L15-L30\n\nI don't know if there are any security implications of downloading a blob. but its possible an attacker could flood a server by asking it to download everything from another server",
"sig": "84e128dc1accf450eca26fa46ccc7128069c4942b9148d62ba523f811b01b8d0bf23c9e156aa1bc7f73beca74792cc82ac25af5b2323571071d8deb4f4197bd6"
}