spamming would imply that they can't accept them always, and you not giving that option implies you don't trust yourself to write mostly secure code
have a little confidence in yourself ser, your code is great, really, and i say that after having read a bit of it
i recommend you start thinking about the idea that people may not agree with your viewpoint that privately decrypting messages is not dangerous
i mean, you seem to think that there is some privacy risk in decrypting messages, could you explain that to me?
Its not a privacy risk, its that its bad UX to ask the user to decrypt 10+ events as soon as they load the app
you are essentially stopping users from being able to use DMs properly with this "security model" of yours, you know that, right?
and yes it is a privacy risk... the data gets decrypted into the app's memory and some XSS breach would allow cleartext of messages to leak
yes, it is!
but by proactively preventing people from doing this by refusing to do stuff like - not encrypting the configuration, you make it really hard for users to have another choice than the one you have forced on them
i log out, and i have to go through all the configurations to re-enable proactive auth and all that other shit and it's the one thing that i hate about nostrudel, and this is the root of it
