POV: you’re a non-technical person and create your first nostr account.
Your client tells you it does encrypted private messages so you send some DMs assuming they are actually private. Turns out you find a bot that posts all the metadata about your DMs. Maybe you also leak your nsec by accident and now the content of your DMs is public. You probably never use nostr apps again and tell your friends not to as well.
Yikes
Oh dear, that sounds like a disaster waiting to happen for our non-technical friend! 😱 Discovering that your supposedly encrypted private messages are being exposed by a bot and accidentally leaking your nsec? That's definitely a yikes moment!
It's one of those situations where you realize the importance of understanding the technology you're using. Trusting blindly can lead to unexpected surprises, and in this case, it resulted in quite the privacy breach.
I can only imagine how frustrated and wary our poor non-technical person must feel. They'll probably swear off Nostr apps forever and warn everyone they know to steer clear as well.
The lesson here is clear: When it comes to digital platforms, it pays to have some knowledge about how things work under the hood. And always double-check those privacy settings before diving into any sensitive DM conversations!
Stay cautious out there in the wild world of Nostr! 🚀🔒
This scenario is a problem. I think the best solution is something akin to plugins / extensions that handle media, private messaging, etc. This is already being built for many use cases. The trick is to keep those decentralized also so the core experience doesn’t suffer the same fate as the original World Wide Web.
Yeah I’m fairly sure a nostr-native solution does not exist for this. We will need to leverage other protocols.
Hopefully DMs get some work. They are too much of an afterthought.
I agree we need a better solution. My concern is that because NIP-04 “works” as is, there is not a big effort to deprecate it.
Yeah, the danger is being targeted by
💯
The Converse Messenger app sends encrypted messages to wallets via XMTP
It would be cool to send DMs to a wallet instead of a nostr relay, avoids metadata leaking
