NIP-44 is just the encryption. The DM protocol is NIP-17 with NIP-59 and NIP-44. No one uses NIP-44 by itself for messages.
1. NIP-44 has padding for fixed message sizes. 2. NIP-17 DMs is giftwrapped by ephemeral keys in public, so repudiation/deniability is provided as well. Gift wraps can even use random alias keys as receivers.
3. The connection graph is not visible unless the NIP requires it to.
4. Break-in protections exist on the wrap. Breaking individual messages does not reveal the main nsec of the Nostr user. The only way the break-in can work is if the attacker gets the long term key or seed, which is also a problem for other E2E apps.
Login to reply
Replies (1)
Also
Let's break down @npub1tm99...xn72 a bit
The app has default gift wrapped nip44 DM's with encrypted content and minimizes meta data leak.
The app also offers "Secret Chat" DM which is the gift wrapped DM plus a nip101 key exchange.
°To use the Secret Chat you need to tap on the user profile, then tap secret chat button.
°This opens an option screen to choose a trusted relay, the time interval to exchange keys, and length of request time out.
°Also under 'more' on the user profile you can request auto delete of messages. The other user has to agree.
°The secret chat also has a screen shot notification.
Amber can be used to sign in and protect your nsec. Use a vpn, tor/orbot.
"Home" will show all messages.
"Contacts" shows your saved nostr contacts, groups and channels.
"Discovery" shows your follows nostr feed and is called "moments" and also has "channels" tab.
"Me" is your profile where you can manage settings and ecash wallet plus just see your own "moments"
The app has a lot going on.
Under "Home" you can create a new "Group".
°Groups can be Open, Closed or Private.
° Open groups anyone can join and see
° Closedd groups is invite only
° Private groups are gift wrapped dm to each member
There is also a cashu ecash wallet in app.
View quoted note →