Replies (8)

NostrDANus's avatar
NostrDANus 1 week ago
Signal had an ugly data breech around 2013... Never trying it again...
I'm probably wrong but I interpret Alex's post as a kind, ironical, and provocative invitation for improvement of DMs implementation. At least to me, something doesn't feel right about White Noise yet, but it's close to what Signal (and SimpleX) do in terms of privacy.
codonaft's avatar codonaft
I find this default behavior in White Noise slightly disturbing: https://github.com/marmot-protocol/whitenoise/issues/528 Not sure why there are not auth-only relays. NIP-42 auth per session doesn't work yet, or/and properly working NIP-42 relays are not really that common yet? Forward secrecy doesn't really work when NIP-42 is not a requirement for NIP-59 gift wraps: either you or your buddy may expose them with these default relays for example. Similar issue with the NIP-46 signers: private events exposed in the wild https://github.com/fiatjaf/nak/issues/116 If you're building a signer, please consider testing/making it compatible with NIP-42 relays and optionally making it show a warning if it's connected over a non-auth relay (or specifically a relay that exposes kind 24133 events). #devstr #privacy #whitenoise
View quoted note →