Nostr Web Client

GOSSIP USERS: Direct messages are now available in gossip on the master branch

- It is rough around the edges. But I think I fixed the most egregious UX issues thanks to nostr:npub10000003zmk89narqpczy4ff6rnuht2wu05na7kpnh3mak7z2tqzsv8vwqk. We will polish it before the next release.

- It is using old NIP-04 Direct Messages because (1) that is what is in active use by other clients and (2) the new encryption standard is not ready

- These DMs have known security weaknesses, including no specific protection against certain cryptanalysis techniques that try to figure out your private key based off the public keys and lots of ciphertext. The more DMs you send, the more ciphertext an attacker has to work with. I don't know how much it takes to break a keypair, I presume it would take a hell of a lot of ciphertext, but since we don't know the attacks possible, we can't say for sure. Buyer beware.

- Our code is structured such that the new giftwrap DMs will be quick to support.

- You will still see your DMs in your inbox too.

Reply to this note

Please Login to reply.

Discussion

Braydon Fuller 2y ago

I think the specifics on what it takes to break a key via DMs were detailed here:

nostr:nevent1qqsyndvd266dhaxvfexu5cmt4ujpqelztlqsk4hynz7wk47j27whw4qpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qygzxpsj7dqha57pjk5k37gkn6g4nzakewtmqmnwryyhd3jfwlpgxtspsgqqqqqqs4ns062

Ryley Schaeffer 2y ago

Thanks. Gossip is my favorite desktop client!

Mike Dilger ☑️ 2y ago

I want to add that older DM conversations may not have all the events. You may just see yours, or just the other party. We may yet improve finding and loading these missing events.

nobody 2y ago

Great work. I'm running it now and checking out the improvements. 💜

marco balmer 2y ago

Dear Mike,

Please make a new release, would love to use DM. Thank you very much.

nostr:npub1acg6thl5psv62405rljzkj8spesceyfz2c32udakc2ak0dmvfeyse9p35c

Mike Dilger ☑️ 2y ago

I understand. But it needs more testing and UI work. I've forked the 0.8 branch already so it won't get any more unstable work, it will just stabilize and then get released.