Replying to Avatar Final

The main Matrix homeserver (http://matrix.org) is down and likely to remain down for a while longer:

https://mastodon.matrix.org/@matrix/115135992360783162

Our Matrix rooms are still available since those aren't hosted on any specific server. We use our own Matrix server for our project accounts, bridge bot, etc. too.

In a couple releases, nostr:nprofile1qqs8t4ehcdrjgugzn3zgw6enp53gg2y2gfmekkg69m2d4gwxcpl04acpzamhxue69uhhyetvv9ujuurjd9kkzmpwdejhgtcppemhxue69uhkummn9ekx7mp0w3radp should be stable enough for you to try it, removes the reliance on the server admin to define identities, and duplicates message delivery across many relays. You shouldn't even notice when a relay is down.

Reply to this note

Please Login to reply.

Discussion

Likely won't be an official GrapheneOS channel due to moderation or bridging requirements but I am paying close attention to the encrypted Nostr identity messaging apps like Whitenoise and Keychat. For users who want the best as a messenger right now, then SimpleX is there and mature.

Useable security comes a long way. We have a lot of apps that do it all, but we need an app that feels as good to use as Telegram does.

I think encrypted messengers using Nostr as an identity could make a valuable replacement to Session since its selling point is not having an often personally identifiable identifier like phone numbers. Session has been the subject of criticisms with their crypto.

Many of these apps including WhiteNoise have an advantage that it has perfect forward secrecy when Session doesn't. Session however benefits from having an onion routing network inbuilt. Build in onion routing and you have obseleted it.

Certain apps like Keychat having their own inbuilt lightning wallet also is quite inventive. I think it could go somewhere if done right. It does what Signal tried with their MobileCoin thing but it is much less of a gimmick by lightning actually being useable. Zapping friends through the messenger like Apple Pay Cash does is a smart idea.

Some may want these to be separate apps though. I'm also heavily concerned about cryptography, although I am not a cryptographer. I still use Signal because it is scrutinised. Upcoming apps using it need a lot of review first before I make large decisions.

I will do a technical article on my thoughts in the future but it's probably less on the security front. I have a blog web page created, I just need to get a domain and a hosting to publish. I just have lots of other commitments right now.

I get Keychat is trying to be like the WeChat of Bitcoin and Nostr, but the browser thing doesn't move me and I turn it off. Not a technical criticism, I am just very conservative with my keys. I'd prefer a bunker like Amber and a separate messenger/wallet and browser or even all three separate that work seamlessly with one another.

With what I mentioned about Session, see:

https://soatok.blog/2025/01/14/dont-use-session-signal-fork/

Follow up after response to it: https://soatok.blog/2025/01/20/session-round-2/

Users can log in to Keychat with Amber.

I have seen that myself and it's great to have

Keychat’s browser is simply the WebView component that comes with the OS.

I looked into this in our public project chat rooms and said it is a plus. GrapheneOS users benefit from running Keychat in GrapheneOS than anywhere else since we harden the webview other apps use. It works in favor for users of both

The main reason Keychat integrates a wallet is to pay the relay using the ecash sat stamp model.

Aware that is the use case now, but I think this idea could be expanded upon with what I mentioned. More than just paying the relays. It may not be related to how you want to design wallet usage long term though.

If I wished to develop a bitcoiner / cypherpunk super app like the WeChat of bitcoiners, then I think directly paying other users in such an app could be nice. WeChat already provides it with WeChat Pay, for instance. Signal tried it with MobileCoin but it doesn't go anywhere. A better and more well known cryptocurrency with a better circular economy fits better and Keychat does that very well with lightning.

Just a completely out of range suggestion and idea. I like brainstorming in public.

Correction. Sorry! Rushing my replies:

I am aware you can pay users through messages but I think the wallet should be built more on transacting with users and contacts or even merchants using Nostr as a communication like WeChat Pay is

Mini Apps provide numerous scenarios for the Bitcoin wallet to be used.

Signal has integrated MobileCoin instead of a Bitcoin Lightning wallet, and that’s one of the reasons we’re building Keychat.

And it is immediately more useable despite the how new Keychat is because of that. It was a mess from the start because MobileCoin is useless unless you're exchanging back to fiat.

Wtf is MobileCoin

Well… suppose I’m not surprised if this is some condition of the USG keeping them afloat. Excited to move onto better rails soon anyhow

Is Keychat able to be used in landscape mode on mobile? I may be missing something, but I was curious.

Sorry, Keychat does not support landscape mode.

No worries! Still love it

Nostr architecture solves so much by removing the requirement of a trusted server.

White Noise uses Message Layer Security, an IETF standard with numerous audits and security proofs. The nostr-mls wrapper has been peer reviewed but not yet audited. I think the cryptography is sound.

Best thing is that it's an open standard and there will be countless implementations that do one thing really well. Looking forward to that variety.

I don't doubt the security of the crypto at all, nor MLS. I am just very cautious. WhiteNoise is clearly designed with care and caution. I have given both WhiteNoise and Keychat good praise as emerging apps in GrapheneOS public chat -- mostly as a Session replacement so far. Regulars have also said they were open to test them further and try them out.

It is also not the best for public chats.