I feel like a conversation would be figured out by collecting enough conversation if Alice responds back and p tags bob.
Another approach but probably inefficient and more cpu intensive is to encrypt everything and recipient scans all events and tries to decrypt the event. The event it is able to decrypt successfully was meant for Alice and contains message from bob, signed by bob.
Many people have said that Nostr nah not be the best for secure DMs.
That wouldn’t scale for sure. 🐶🐾🫡
alice would ideally use the same protocol- a one-time key to send the message. now alice isnt the sender.
I finally found a video that someone made a while ago about the problem.
nice find! this is very similar to what I was thinking, down to calling it a “wrapped message”. though this has some additional complexity layered in that I hadn’t considered nor wrapped my head around fully
hey #[4] what’s the status of your wrapped dm stuff? seems I cooked up a very similar idea on the couch last night 😂
Checked profile. More to explore.
nostr:note152vytal3u0z8tzu7d2mx7szcy0u2nm9tzx3t75py9wrqj7etkypsddc7e9
Yeah, quite some progress! I’m preparing a full client dedicated to private DMs. It will ship originally with regular NIP-04 support, and my plan is to support a range of extensions and alternatives. There is no shortage of interesting ideas to improve DMs on Nostr, incognito DMs being pretty good. What we need now is just a client or set of clients that act as a testing ground for these ideas: bring real users to stress test the different ideas and find what works and what doesn’t.
My current thoughts on Incognito DMs/wrapped DMs is that I think the wrapped private events are a great idea that will likely be a core part of whatever the final system is, so that’s staying. But I’m not entirely sure about disposable identities/ephemeral pubkeys anymore. They are very simple conceptually, but they don’t play well with relays. Relays want real pubkeys, they want to know things are not spam. So I think the idea needs more work, but generally I’m optimistic that we can definitely find some system that both works with relays and preserves privacy.
