Yes! The MLS protocol has numerous security proofs from different teams. The open-mls library is audited as well. We will instigate an official audit of the nostr-mls crate in the rust-nostr library, and of the white noise codebase. It does not make sense to do this audit at this early stage, but this is something we'll likely look into later this year.

Can we trust these audits of MLS? Maybe the teams were compromised like Core.

I just want to know if the nsec we paste to login is safe?