I don't like exposing even encrypted data. If the data is safe-guaeded AND encrypted, the malicious party needs to get in AND decrypt. There's an extra step, a barrier. If it's left in the open encrypted, that wxtra safe step is gone.

Don't forget that quantum computing is on the horizon, with all the implications that entails for decryption.

Reply to this note

Please Login to reply.

Discussion

I no longer trust third-party safeguarding. That went out the window a long time ago. My starting position is that if it is hosted in the cloud, it is compromised. I might safeguard for my own, keeping the main relay in a secured network, but no longer make that a security assumption for others.

I already have some buddies looking into PQC - hopefully a NIP-44-PQC soon.