Avatar
Water Blower
6b9da920c4b6ecbf2c12018a7a2d143b4dfdf9878c3beac69e39bb597841cc6e
Creator of Blowater & I self identify as a Pro Sleeper

It is a problem. As a developer who mostly focusing on DM, the problem is more than metadata leakage.

It's a square of

security & privacy

engineering complexity

user friendliness

decentralization

Some solutions solve No.1, keeps No.4 with a huge cost to No.2 & No.3

But I want to balance these 4.

Engineering Complexity is overlooked often but it is very important. Complex solution is hard to iterate/fix later on. It's harder to implement so that fewer developers implement it so it further harms decentralization.

They just can't comprehend the concept of pure fun

Profile Search now supports pagination

https://blowater.app

NIP-42 is on roadmap. But I do have a question. Why don't we have stateless auth that authentication is embeded in each REQ? like

["REQ", "sub-id", "auth string", filter1, filter2]

NIP-42 is stateful

nostr:nprofile1qyd8wumn8ghj7urewfsk66ty9enxjct5dfskvtnrdakj7qgmwaehxw309aex2mrp0yh8wetnw3jhymnzw33jucm0d5hsz9thwden5te0wfjkccte9ejxzmt4wvhxjme0qythwumn8ghj7un9d3shjety9ejx2mn09ejx2a30qqsrhuxx8l9ex335q7he0f09aej04zpazpl0ne2cgukyawd24mayt8gxnus85

https://world.hey.com/dhh/developers-are-on-edge-4dfcf9c1

Here in Nostr, I am not worried. Sovereignty Engineering.

NIP-07 is added back. If you are on mobile web, sorry that I am not focusing on mobile at the moment. In fact, I have to admit that my lack of mobile knowledge.

Replying to Avatar Gzuuus

nostr:npub1dww6jgxykmkt7tqjqx985tg58dxlm7v83sa743578xa4j7zpe3hql6pdnf Can I only log in to blowater.app using my nsec? πŸ€”

Yes, it's a disappointing problem right now. I removed NIP-07 in the last release. I will add it back. The problem is that right now, all NIP-07 extensions that I am aware of does not support NIP-44 yet.

Actually, just checked, https://github.com/vitorpamplona/nips/blob/sealed-dms/07.md, NIP-07 should support NIP-44 now.

I will add it back in 3 hours.

good design, I like it nostr:nprofile1qynhwumn8ghj7un9d3shjtnwdaehgunpd9h8xmr90yhxxmmjv93kcefww3hk7mrn9uq35amnwvaz7tms09exzmtfvshxv6tpw34xze3wvdhk6tcpr9mhxue69uhksmmyd33x7epwdehhxarjxyhxxmmd9uqzp978pfzrv6n9xhq5tvenl9e74pklmskh4xw6vxxyp3j8qkke3cezgddwwc

How is Coracle's NIP-44 implemented? Is it wrapped? Blowater is using NIP-44 without wrapping. Now no DMs are compatible beyond NIP-4. I don't know which way I should go.

I am currently leaning towards having dedicated relays to serve DMs so that meta data is not leaked just to unlock feature development.

Wrapping still feels kind of over engineered.

Nostr relay devs, I wish there is a set of standardized

["OK"] and ["NOTICE"] messages so that clients can show user proper error prompts when things go wrong

NIP-07 sign-in was removed due to some extensions hasn't implemented NIP-44 encryption yet.

Blowater now still decrypts NIP-4 events, but will encrypt all DMs with NIP-44.

Therefore, using a NIP-07 extension effectively breaks DM, at least for now.

This is a trade off that's painful to make.

Not much love is put into encrypted events in the community as a whole so that I decided to break some patterns to just unblock the product development.

A more secure design is welcome and I will work on it.