Replying to Avatar Vitor Pamplona

Reminder: NIP-04 DMs have a security flaw.

With significant use (DMs + private zaps + zap payment requests via wallet connect + private lists), an attacker with sufficient hash power can brute force your private key.

Please consider migrating to the new DM with GiftWraps as early as possible.

We also invite all white-hat cryptographers out there to try to break the new system. The sooner we can stress test the design, the better it gets.
Avatar
Brunswick 2y ago

How does one switch to the new protocol?

Reply to this note

Please Login to reply.

Discussion

Avatar
Vitor Pamplona 2y ago

On Amethyst, there is a little incognito icon on the text field that you use to write replies in private chat screens.

Avatar
Brunswick 2y ago

Is there any indication that it is working on the other end? If its not enabled on the recipient's side, will communication commense using the insecure method regardless of the setting?

Avatar
Brunswick 2y ago

I answered my own question:

Old->new: new recieves, but shows with insecure icon.

New->old: old does not recieve

Avatar
Vitor Pamplona 2y ago

Make sure your relays are accepting these encrypted messages. Many of them are still unaware of the new type.