What if DMs were device-based?
We could use a secret from the device to create a new private key to use exclusively DMs. Since the new DM key can stay in the device's secure element, there is no way for any other device to access your DMs, even if you keys leak (they will inevitably do).
Pros:
- avoids leaking DMs when the nostr key leaks.
- DMs that expire when the phone expires
Cons:
- users cannot migrate the DM history to a new phone/client
With private group DMs, we could add all device keys in a single DM message so that current devices of a user can read the DM history.
Vitor Pamplona
npub1gc…fnj5z
2023-05-20 13:39:14
Author Public Key
npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5zPublished at
2023-05-20 13:39:14Event JSON
{
"id": "06c5634c2dad25f2c3de0a48ae3e319bbccb4422b0b58899e16113b063d7bda5",
"pubkey": "460c25e682fda7832b52d1f22d3d22b3176d972f60dcdc3212ed8c92ef85065c",
"created_at": 1684589954,
"kind": 1,
"tags": [],
"content": "What if DMs were device-based? \n\nWe could use a secret from the device to create a new private key to use exclusively DMs. Since the new DM key can stay in the device's secure element, there is no way for any other device to access your DMs, even if you keys leak (they will inevitably do). \n\nPros:\n- avoids leaking DMs when the nostr key leaks. \n- DMs that expire when the phone expires\n\nCons: \n- users cannot migrate the DM history to a new phone/client \n\nWith private group DMs, we could add all device keys in a single DM message so that current devices of a user can read the DM history. ",
"sig": "e5824f7aa8aed073ea2229a295e3f2a0b56fee8b124cf98051f2725c72850e801a919e7edee4c83e80e5fb31b20b2ffb1bd5e1b4bdcfb7215e5dbdd8a62d1ec4"
}