orly doesn't leak metadata with auth on. i think that messes up giftwraps which only show the receiver's npub in the tags. but it won't send normal nip-04 messages to anyone unless their authed npub is in the message. i was trying to explain that to people for some time but it got really boring how they just seem to want to ignore relays place in the protocol.

i need to make a nip-04 dm client in the UI of orly, with full control of which relays it sends to. with two users sharing the same relay it doesn't even have to leave the relay, and nobody can get at it unless they seize the server. would be cool to make a package that sets that all up including a dead man lockdown switch, that requires an admin to unlock it once a week before a deadline. then if something happens to the admin, everyone's stuff is most likely safe