Replying to Avatar Chris

To everyone jumping on the #0xchat bandwagon, exercise caution and remember it's still under heavy development. As of 5 minutes ago, I confirmed it's still passing unencrypted audio snippets to an Alibaba cloud server even though they were sent in encrypted DMs.

https://nostr-chat-bucket.oss-cn-hongkong.aliyuncs.com/voice/84761b34-2c10-48e5-b688-8cbbedb47ebf.aac

Avatar
ABH3PO 1y ago

Ahh, so media doesn't go in with the text content on any nostr apps, so media would not be encrypted. Probably they should let people know about this, also you CAN choose the file server you want in the settings.

Reply to this note

Please Login to reply.

Discussion

Avatar
Chris 1y ago

Doesn't matter if it's my server or Alibaba. It's not E2EE. Signal and SimpleX enforce E2EE on everything in the chat.

Avatar
ABH3PO 1y ago

True, no arguments here.

Avatar
ABH3PO 1y ago

Although, I'm still fine if they just give a warning to users that any media sent would not be encrypted.

Avatar
Chris 1y ago

And communication needs to be clearer on this point. Should not be any ambiguity to the user.

Avatar
0xchat 1y ago

Yeah, sorry for the miscommunication. The images sent via DM are end-to-end encrypted, while others (audio, video) are not. Will fix it in the next update.