I no longer think gift wrapping was the right play for private events like I used for nostrcal.com. I'm interested if anyone is using this kind of functionality on the project?

While gift wrapping creates excellent privacy for events, it also doesn't work well with bunker signing. It's also kind of computationally wasteful since you have to download all of your gift wraps and unwrap them all to find the events that you want to use. If more event kinds start publishing wrapped versions then you lead down a path where you may need to decrypt way more than what you need.

I'm starting to think that privacy may be better provided by the relay with auth for the calendar use case at least. Users can define their home relay, or a relay they trust, for their client to know where to go then rely on the relay to limit access instead of wrapping. You're trusting the relay with your event to keep it private but the privacy conscious are likely already running a relay to backup and store their notes anyway.

Reply to this note

Please Login to reply.

Discussion

Gift-wrapping means that someone can leak confirmable proof of a communication without leaking the content, which opens up all sorts of abuses.

I'm not a fan.

ᴀᴜᴛʜ, ᴀᴜᴛʜ, ᴀɴᴅ ᴀᴜᴛʜ

ᴛʜᴇ ɪᴅᴇᴀ ʏᴏᴜ ᴄᴀɴ ᴘʀᴏᴛᴇᴄᴛ ᴘʀɪᴠᴀᴄʏ ᴡɪᴛʜᴏᴜᴛ ɪᴛ ɪꜱ ʀɪᴅɪᴄᴜʟᴏᴜꜱ

For most instances of these private events you were likely gift wrapping to yourself so no one else was involved. That being said the booking function I was using did use gift wraps that could be leaked by other participants. I'm also increasing less of a fan too.

And, as you pointed out, why gift-wrap events you send to yourself? They often never even leave your home relay, as they're just drafts or whatever.

Exactly 💯

The bunker thing didn't even occur to me. Interesting, thanks.

nostr:npub1wqfzz2p880wq0tumuae9lfwyhs8uz35xd0kr34zrvrwyh3kvrzuskcqsyn is maybe interesting, in light of what you are currently building.