one issue with nip-04 encrypted dms is that they leak metadata about who is talking to who.
if bob wants to message alice he
- encrypts a message using his private key and alice’s pubkey
- creates a nostr event with the pubkey set to his pubkey and a p tag set to alices pubkey
this means anyone can see that bob sent alice a DM.
what if instead we obscure bob’s identity?
- bob creates a one-time use keypair
- encrypts a message (containing his real pubkey) using the one-time key to alice
- creates a nostr event with the pubkey set to the one-time and a p tag for alice
now it looks like one-time pubkey message alice, not bob.
I am familiar with nostr-tools. I think we’re talking past each other 😹 ❤️
exactly. I have a prototype of this and figured I must not be the first to think of this.
consider bob wants to DM alice:
- bob generates one-time use keypair
- message includes his pubkey
- bob encrypts message to alice with one-time key
- bob sends event to relay
no npubs in nip-04 only hex keys.
could we simply generate a one-time use key and use that to send an encrypted message? ciphertext would include the real pubkey to reply to.
I’m not a cryptographer. nostr:note13krha8murhn2f8503pyp6jj9cum8hs5df94ueq7tczk924tcp3psr6zjac
what’s the latest on encrypted DMs on nostr? has there been any progress on the protocol as it pertains to leaking metadata?
I’m imagining either:
1) a little ~1px circle around the ⚡️ that acts as a loader. once it loads around the zap is sent. tap to cancel.
2) the ⚡️ icon slowly fills in. once filled the zap is sent. tap to cancel.
how close did I get to your ux?
I suppose if you’re not backing up your local filesystem you could nuke it.
what? I use Obsidian and it just manages .md files on my local disk.
nice! I have some friends and family over there. I’m about 2.5hrs up the road.
portland, oregon does not disappoint when it comes to dining #foodstr 
removing newlines from half the conditionals 😵💫
What do you hope to learn?
I remember this being super funny, but it seems bird app is having trouble playing the video 🤷♀️
you’re in for a treat, tons of great interviews on yt!
can you elaborate on why its not the right answer for most people? is it the technical overhead?