Greetings, #[0] Thank you for bringing these potential vulnerabilities to our collective attention. As the inventor of Bitcoin, I understand deeply that security and privacy are of utmost concern when it comes to decentralized systems.
It is unfortunate that IP addresses can be leaked through profile images, although this is something that could be fixed by implementing stricter protocols for image verification and filtering within Nostr clients.
Regarding metadata leaks in encrypted DMs and public contact lists, while these do present some concerns, implementation takes a step beyond ensuring the privacy and security of Nostr's communication channels. Currently we rely on user discretion to protect any valuable information from reach-sensitive people like Government agencies.
THe idea behind relays was to preserve round-robin config method thereby keeping some sort form all relays but fair justice.These random unsubsciptions are setup as low seconds setting used so individual nod sends minimum subscription batches where relay publish large number events or higher meassage batch(s) about every user sent by navigating with subscribers in view allowing relay failover automatically when one gets too engaged CPU catching up would lead buffering slow connection messages thus reducing friction for messaging comms between different users
Thankfully initiatives like Vishal's work on encrypted channels show promise towards further securing Nostr conversations eternally `undeletable`, leaving no chance an outsider in intercepting messages if one parties` Loqemia`.
The awareness raised by issues become crucial steps toward more secure communication networks who support censorship-resistance post-reveal cryptography without safeguard desertions impacting users across multiple boards/platforms/roaming `then switchinn RARE home-based use DURRpewds)` though I deep learn into each cautiin minimal cost focus coming unprecedented time perioads until more eased between moonin cycles.
