Has it ever not been 2023 in nostr?
Just put together a (probably longer) summary here: https://gist.github.com/staab/f8284af12450dbbdcead6e0c3ed95e2c
TL;DR it double-wraps messages and leaves the inner one unsigned which increases metadata hiding. It also avoids key sharing (although key sharing could be added on top of it if desired).
Because of the increased interest in encrypted chat recently, I decided to put together a survey of different proposals with a summary of their common ideas. The goal is to allow us to 1. decouple different use cases from another, but keep a shared core that devs can build on, 2. get us all behind one proposal, and 3. pack everything into that proposal that is needed for good UX and privacy.
Please take a look and leave comments/corrections, and tag anyone else working on an implementation.
https://gist.github.com/staab/f8284af12450dbbdcead6e0c3ed95e2c
nostr:nprofile1qqs9nwtdlrvttent8w268cd6zkt4pfhd66duhwsc27htv549kgyt6kgprpmhxue69uhhyetvv9ujuumwdae8gtnnda3kjctvqywhwumn8ghj7mn0wd68yttsw43zuam9d3kx7unyv4ezumn9wsq3camnwvaz7tmwdaehgu3wvf5hgcm0d9hx2u3wwdhkx6tpdswsu8t8 nostr:nprofile1qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqpz3mhxue69uhkummnw3ezummcw3ezuer9wcq3wamnwvaz7tmxd9k8getj9ehx7um5wgh8w6twv5qs6amnwvaz7tmwdaejumr0ds7csnrk nostr:nprofile1qqsrhuxx8l9ex335q7he0f09aej04zpazpl0ne2cgukyawd24mayt8gpr4mhxue69uhkummnw3ez6ur4vgh8wetvd3hhyer9wghxuet5qyv8wumn8ghj7un9d3shjtnwdaehgunpw35jucm0d5q3vamnwvaz7tmjv4kxz7fwdehhxarj9e3xzmnyv0c7x9 nostr:nprofile1qqs84k6jpsav0jmdeqjn2zxlpnsajaw6f8l0m2d4e9t8gjsyn53s4nspz3mhxue69uhhyetvv9ujuerpd46hxtnfduq3vamnwvaz7tmjv4kxz7fwxpuxx6rpwshxxmmdqyg8wumn8ghj7mn0wd68ytnhd9hx2u9umav
Yes, I wanted heterogenous lists that could be used for custom feeds. I said this in the review process, but it didn't make it into the spec so I just shoved people into "bookmarks".
Have you looked at vitor's nip 24? Very similar, but I think better executed. I put together a PoC of it here: https://inbox.coracle.social.
I'm also working on a comparison of all private messaging nips so that maybe we can all get on the same page and row together.
Coracle only publishes 30001 lists currently, this could be the issue
what about nip 101 and nostr:npub1tm99pgz2lth724jeld6gzz6zv48zy6xp4n9xu5uqrwvx9km54qaqkkxn72
? is this secure? the app is nice.
I hadn't seen that, I was thinking about a way to augment vitor's nip along the same lines. It's a good idea, but maybe could be improved by generalizing to a session key, which can represent one or more parties in a private chat (for scaling purposes) and which can be periodically invalidated or expire to limit the scope of key leakage.
Thank you for all the hard work. Hopefully, You nostr:npub1g53mukxnjkcmr94fhryzkqutdz2ukq4ks0gvy5af25rgmwsl4ngq43drvk nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z and other Nostr devs can solve this Nostr DM issue completely. 🙏
Definitely, I'm way out of my depth but it finally seems like it's happening, with the help of some cryptographers.
Is there any written spec for this? Is it similar to https://github.com/nostr-protocol/nips/pull/686 ? Cc nostr:npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5z nostr:npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn
That is the one we've been working on, and is much more secure. I want to experiment with adding ratchets to it this week.
Yeah, this is not a good solution. I think that bounty is incentivising more bad/partial solutions.
Are we finally doing bloom filters? Where can I learn more?
Niiip thirty twoooo
Exactly what I thought at first glance too
Sounds like a great idea, not sure if its my forte, or whether I have time. Is there an existing project you're hoping to build on?
What's involved? Adding nostr to fedimint or vice versa?
nostr:nprofile1qqs8nsk2uy2w529fs8n4tx60u7z553e4yx5dy2nxhw4elgjgawpqlaspp4mhxue69uhkummn9ekx7mqpzdmhxue69uhhyetvv9ukzcnvv5hx7un8qyfhwumn8ghj7mn0wd68yt3k8quzummjvuc8kxpx want to be a guest on the Thank God For Nostr podcast? I'd love to chat about your departure from Truth and future plans for nostr work, or really anything else.
When my wife is out of town I always watch Arnold Schwarzenegger/Bruce Willis/Sylvester Stallone movies with my boys, as my father did before me.
Today was a really good day. Coded so hard my eyes started hurting.
