That’s what I proposed, a separate pair of keys for DMs that user does not have direct access to. Rotate them every period and keep old keys on the device. Publish public part as part of your profile and we are good. All the gift wrapping and extra steps in the new encryption are not making anything safer, just making the implementation more convoluted and opening clients to potential bugs that would make security worse and not better. People always forget to include human factor into the design of security products, it is the weakest link. The easier it is to implement (e.g., NIP-04) the safer it is from sloppy bug or a missed step during implementation 🐶🐾🫡
My 2 sats worth of opinion
fishcake / The Fishcake🐶🐾
npub137…ak37w
2024-04-26 09:17:51
in reply to nevent1q…n7n4
Author Public Key
npub137c5pd8gmhhe0njtsgwjgunc5xjr2vmzvglkgqs5sjeh972gqqxqjak37wPublished at
2024-04-26 09:17:51Event JSON
{
"id": "a938484365c699adbddea3752ddff4a32748caa19e626796b7b469517a99644f",
"pubkey": "8fb140b4e8ddef97ce4b821d247278a1a4353362623f64021484b372f948000c",
"created_at": 1714123071,
"kind": 1,
"tags": [
[
"e",
"ab2d9baaf322c68aaa30810c01f7a06d334f421777f5354dadb4e26f47b749cc"
],
[
"e",
"c3fb4bd301b97856c2b2a121ab040be9cdb10fafe74d3675aeb55dfdd864f46f"
],
[
"p",
"eb55902a9f88d79458b886e8c2e78dc6760c39f85a44a656a8b0ed5b69f806df"
],
[
"p",
"ee11a5dff40c19a555f41fe42b48f00e618c91225622ae37b6c2bb67b76c4e49"
],
[
"p",
"eb55902a9f88d79458b886e8c2e78dc6760c39f85a44a656a8b0ed5b69f806df"
]
],
"content": "That’s what I proposed, a separate pair of keys for DMs that user does not have direct access to. Rotate them every period and keep old keys on the device. Publish public part as part of your profile and we are good. All the gift wrapping and extra steps in the new encryption are not making anything safer, just making the implementation more convoluted and opening clients to potential bugs that would make security worse and not better. People always forget to include human factor into the design of security products, it is the weakest link. The easier it is to implement (e.g., NIP-04) the safer it is from sloppy bug or a missed step during implementation 🐶🐾🫡\nMy 2 sats worth of opinion",
"sig": "c5868fb340739166dd340deba7fbe0d80b389d6e503ae297b4bd982172db38aedf9d6ea22ec84ee8c004bba7d442e2b8ce20ec220375dc2b83a78373b9b1d01d"
}