Replying to Avatar Mike Dilger ☑️

The risk of leaking your nsec is FAR greater than anything NIP-17 improves upon. NIP-17 / NIP-44 are not a panacea, and the end user message should be that it is a minor technical change, and 99% of their security comes with handling their nsec properly.

Not leaking metadata is an improvement (except the relay taking the message knows something).

The technical encryption algorithm changes probably make no practical difference for a long time yet.
Avatar
The Fishcake (nostr.build) 1y ago

That’s why I think this nip solves the problem that was not there in a first place. Giving people false sense of security, is worse than no security 🐶🐾🫡

Reply to this note

Please Login to reply.

Discussion

Avatar
Mike Dilger ☑️ 1y ago

I think the NIP is good, but the messaging isn't. It is strictly an improvement (actually a whole slew of improvements), it is just that the net effect of those improvements is practically very small compared to the real other risks people face.

Avatar
Vitor Pamplona 1y ago

The NIP does open the door to solve it with keybaliases for GiftWraps. You don't need to use your main index to receive and save your messages. :)

We just need a client to implement it.