It's the same spam we see on NIP-04. Anyone that just send tons of messages from random keys. The only difference is that relays can't do anything about GiftWraps. It must be resolved at the Client level.

Someone sent a bunch of GiftWraps to me a few months ago. Amethyst just ignored them all, deleted the event contents but kept the ids to avoid downloading them again.

We tested key aliases to hide the main pubkey of the user from the p-tag. You could give an alias to your friends and just download those messages instead. Something like a priority inbox. You can even rotate that key periodically to improve privacy.

Reply to this note

Please Login to reply.

Discussion

But client must login to the relay and it only send the events you own to client. Same as NIP-04.

How to alias a key to your pubkey the relay know and others don't know?

Yes, the client logs into the User's Private DM relays. Ideally, private DM relays auth and only send GiftWraps if the authed user is p-tagged.

The relay shouldn't know the alias to your key. You can auth with the alias key instead of the private key to download the GiftWraps to the alias key.

🤟 what a clever method.