> protocol for decentralized DMs We already have the simplest solution to this: 1. Signed DM's (NIP-04) 2. Great encryption (NIP-44) 3. Relays The relay part is often overlooked, but: - it keeps both the secrecy maxi (personal inbox-relay over Tor f.e.) and the total newbie (free public relay) interoperable - it gives agency to npubs to manage their own trade-offs - it lets them set prices or other conditions for their inbox - it's incredibly easy for apps to maintain their interoperability Also, it doesn't pretend to be a tool for secrecy.

agree with you in some ways, and I frankly would migrate every chat to nostr based solutions with 0xchat. For me is more importat freedom than an abstract "security", and I'd happily abandon signal today if my chats friends would agree. But still, its important to have secrecy on nostr and secret/really private chats. For example, forward secrecy is something someone understimate unless copy paste the wrong key and leak chats from 3 years ago. We need nip104, normies are not the target in this stage of development in my opinion. Low-time preference tradeoffs need to be taken today, normie friendly clients that mix nip-44 and nip-104 in a convenient way will come one day. Also and most important: in my opinion, every new development propsal and nip shouldnt have the goal of attract normies. Companies and clients should.