The problem here is that the risks of NIP-04 have been extremely exaggerated. It is not an ideal spec and it should be moved off of, but the idea that it presents *any risk* is absurd.

Replies (1)

No, the problem is that the risks to nip04 are unknown because it depends so much on how signers and clients implement NIP-04. It SHOULD be exaggerated exactly because devs can and will fuck it up. Its virtually impossible to fuck an implementation of nip44 up.