Are push notifications end to end encrypted? #privacy #damus
Maybe this was a bad idea đ
nostr:note1ncd9p0p0mxzxxcc040ygfnj4u7e7r2vjqt4tsrfmt24puxvc3hnsnhmfyk
Discussion
anything pushed is already public or e2e encrypted (dms), what would be the purpose of end to end encrypting push notifications?
I guess perhaps hiding that from apple? I donât think they are encrypted atm nostr:npub13v47pg9dxjq96an8jfev9znhm0k7ntwtlh9y335paj9kyjsjpznqzzl3l8
If we encrypted to the npub notifications for watch-only accounts wouldnât work đ¤
You can encrypt them with a local client generated key
We could encrypt them using the recipient pubkey, but would there be a benefit? All of the data in push notifications is already public in the Damus relay anyways đ¤ˇââď¸
The only thing I could think of is hiding the device id / npub association from apple, but that is already deniable since anyone can login with your npub
The purpose of encryption is not to âhide public infomationâ, as you imply. The purpose is to make âwhat you are doing on your phoneâ private by default.
nostr tags are already not private though? Anyone can tag you and anyone can read that someone tagged you.
Push notifications are not a function of what you are doing on your phone, its a function of what our server desides to notify apple based on public information