Nexus market mirrors
nexusb2l7fmqnefwphyy7m5zjhlkytlbo7qbb5lu5dlczr3azgii2gyd.onionnexusma2iegzo7atzwbrwxhcdopyri3vare2twibldnlc3txqjdeb5yd.onionnexusabcdpvtnivv6owtqjkvd22k5x3hlpofkgjqjmgzltlde6mwe2qd.onionPublished as supplied. Nothing here is monitored, so this is not a claim that any of them opens right now.
Asking for a signed message
A reasonable request that lands badly about half the time, entirely because of how it is phrased. The fix is to make it sound like something you do every time rather than something you are doing about them.
What you want out of it
A block of text signed by the key the account has used before, saying something specific and current. Not a general assurance. A signature over the words trust me proves only that the key holder can type those words.
What the vendor sees
Either a routine request from somebody methodical, or an accusation dressed as a request. The difference is whether you explain that you ask everybody, and whether you say what you want signed. Vague requests for proof are the ones that get short answers.
how do i know youre really you? can you prove it, sign something for me
I check this with everyone before a first order. Could you sign the line below with the same key as your profile.
Order for listing 4417, today, for [buyer name]. Nothing else needs to be in it.
The weak one asks somebody to prove they are not an impostor, which is a hostile framing and also unanswerable as written. The strong one says it is routine, supplies the exact text, and names the key it should match. It is now a two minute job with an obvious output instead of an open question about identity.
What to leave out
- Any suggestion that you suspect this particular account. Even if you do.
- Asking them to send you their key. You want the fingerprint from somewhere they do not control, otherwise the check proves nothing.
- Accepting a screenshot. A picture of a signed block cannot be verified and asking for one wastes the exchange.
Reading a no
A refusal is information but it is not proof of anything. Plenty of ordinary vendors do not keep a key handy and will say so. What is worth noticing is a refusal wrapped in irritation, because the request costs nothing to honour and being annoyed by it is a choice.
What happens next
Verify against a fingerprint you collected somewhere else, not against a key the same account just handed you. If the two do not match, stop there and do not explain why in the thread. There is nothing to gain from telling somebody which check they failed.