diff --git a/src/nostr.rs b/src/nostr.rs
index f373df8..54dd5b8 100644
--- a/src/nostr.rs
+++ b/src/nostr.rs
@@ -180,6 +180,19 @@ impl WebSocketService {
                 redacted = redacted || was_redacted;
             }
 
+            // New policy Feb 2025: Redactions trigger a "CLOSED: auth-required" because
+            // some clients will not AUTH otherwise.
+            if redacted {
+                // They need to AUTH first
+                let reply = NostrReply::Closed(
+                    subid,
+                    NostrReplyPrefix::AuthRequired,
+                    "At least one matching event requires AUTH".to_owned(),
+                );
+                self.send(Message::text(reply.as_json())).await?;
+                return Ok(());
+            }
+
             // sort
             events.sort_by_key(|e| std::cmp::Reverse(e.created_at()));