Someone posted an image of my encrypted nostr DMs on Twitter. Of course I know that it's possible to see the metadata but I didn't realize how creepy it feels. You can see who I talk to and when. You could deduce my social circles, maybe even real world activity related to my messaging patterns. From now on, I will stop using normal DMs on nostr. The traces they leave is horrifying and you shouldn't use DMs either. *Please do not send me any DMs from your npub if you have something to communicate to me.* Use a random npub or a giftwrap or use a different method or use a different network to reach me. Nostr DMs have always been a complete privacy hell and I urge anyone to realize this and act accordingly. I repeat: DO NOT DM ME. I WONT DM YOU.

Replies (38)

Clients could have a little warning when opening DM section about the reality of DMs. 🤔
I don't get why the Nostr community (clients & relays) has given up on supporting NIP-42. It'd prevent random users from doing this (but not the operators of the relays you use). Nevertheless feels like low hanging fruit. @semisol @fiatjaf you authored the NIP, any insights on this?
If you used simplex couldnt someone also post a screenshot of that chat?
you need to be a party of that chat to do that. The nostr dm meta data is public for any third party to map and visualize / track. Messages are encrypted, but reciever and timing is public in nostr dms.
At the same time i dont see a HUGE problem because.. they are DMs, not PMs. Direct message, not private message.
Default avatar
nobody 2 years ago
Does oxchat fix this with private and secret dm?
Default avatar
deleted 2 years ago
Put simplex link in your profile 🫡
Default avatar
deleted 2 years ago
Never should have beem created in the first place imo. Many great messaging options, like Simplex. Keep nostr simple imo