Replying to Avatar Vitor Pamplona

Little known advantage of Nostr DMs: No one can know if the chat is complete or if there are missing messages even if the nsec leaks.

Nostr doesn't link DMs to one another in any way. Double ratchet schemes, like Signal for instance, derive keys from the state in previous messages making it a verifiable chain. If a message is missing, whoever has the main key to decrypt and derive the chat will know it if the chat is complete or not.

On Signal, or any ratchet-based technique, you can prove you have all the messages.
2b
Angela 9mo ago

I know ratchet to mean something entirely different ☺️What’s the beef with signal in the tech world these days? Just curious. It’s odd bc stateside people know press outlets use it, but the government does too, and now the EO is like “defund it.” They tried in 2019, to get into signal, and it didn’t work. For some reason signal gets bad wrap for privacy but if the tools, it’s the best - at least 501c3 - one.

Reply to this note

Please Login to reply.

Discussion

Avatar
Vitor Pamplona 9mo ago

Basically people think Signal is private, but everybody is using the company's own servers and those servers can track everyone by IP if they turn evill (or get a court order).

Tracking by IP breaks all metadata privacy. If everybody uses the same servers, all metadata is known by the company. Regardless of which encryption scheme they use.

Same for SimpleX. The protocol only makes sense when you, and your friends, don't use their default servers.

2b
Angela 9mo ago

Interesting. I’ll need to reread this again later to make it stick. If someone ever did get in, they’d have like - 5 Netflix docs, an HBO series, and conference circuits galore of content. Wild. Thanks for saying 🕊️