Here's how I'm doing it: https://github.com/nostr-protocol/nips/pull/1947
This approach is based on some stuff in NIP 17 for sending encrypted media. Basically, encrypt the file, upload it to blossom, and send the decryption key in a message along with the URL. I think this works great. I don't know why in particular it doesn't use NIP 44 (maybe Vitor Pamplona (nprofile…vz88) can elucidate). But aes-gcm is pretty standard web crypto, so not hard to use. For your use case, you might look at defining a new event kind for "encrypted media" in NIP 94.
hodlbod /
npub1jl…jynqn
2025-06-04 18:01:24
in reply to nevent1q…85dg
Author Public Key
npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqnPublished at
2025-06-04 18:01:24Event JSON
{
"id": "05b68cfa6f5fc8f4e8d47444f5e6a378380fb53093612adbc414d1833ab739d2",
"pubkey": "97c70a44366a6535c145b333f973ea86dfdc2d7a99da618c40c64705ad98e322",
"created_at": 1749060084,
"kind": 1,
"tags": [
[
"p",
"460c25e682fda7832b52d1f22d3d22b3176d972f60dcdc3212ed8c92ef85065c",
"wss://nos.lol/"
],
[
"p",
"06b7819d7f1c7f5472118266ed7bca8785dceae09e36ea3a4af665c6d1d8327c",
"wss://relay.damus.io/",
"Tim Bouma"
],
[
"p",
"b7274d28e3e983bf720db4b4a12a31f5c7ef262320d05c25ec90489ac99628cb",
"wss://nostr.land/",
"Dikaios1517"
],
[
"p",
"9be0be0e64d38a29a9cec9a5c8ef5d873c2bfa5362a4b558da5ff69bc3cbb81e",
"wss://nostr.wine/",
"Fabian"
],
[
"p",
"645681b9d067b1a362c4bee8ddff987d2466d49905c26cb8fec5e6fb73af5c84",
"wss://wot.nostr.party/",
"KoalaSat"
],
[
"e",
"db966a63e465c506117db7521626d65cab808a1e6beec0d3d11c597c01fd7413",
"wss://relay.brightbolt.net/inbox",
"root"
],
[
"e",
"596ef98a90f3b9b7ed070d23e8a1798dfaa8a778ccdaec70a7b409c90d6c4be1",
"",
"mention"
],
[
"e",
"d1ca1b8ea9d5c6fbae773327bd7dbb26d4c0ddab433ece344e92135f2527692c",
"wss://relay.damus.io/",
"reply",
"06b7819d7f1c7f5472118266ed7bca8785dceae09e36ea3a4af665c6d1d8327c"
],
[
"client",
"Coracle",
"31990:97c70a44366a6535c145b333f973ea86dfdc2d7a99da618c40c64705ad98e322:1685968093690"
]
],
"content": "Here's how I'm doing it: https://github.com/nostr-protocol/nips/pull/1947\n\nThis approach is based on some stuff in NIP 17 for sending encrypted media. Basically, encrypt the file, upload it to blossom, and send the decryption key in a message along with the URL. I think this works great. I don't know why in particular it doesn't use NIP 44 (maybe nostr:nprofile1qy88wumn8ghj7mn0wvhxcmmv9uq3zamnwvaz7tmwdaehgu3wwa5kuef0qythwumn8ghj7anfw3hhytnwdaehgu339e3k7mf0qqsyvrp9u6p0mfur9dfdru3d853tx9mdjuhkphxuxgfwmryja7zsvhqx9vz88 can elucidate). But aes-gcm is pretty standard web crypto, so not hard to use. For your use case, you might look at defining a new event kind for \"encrypted media\" in NIP 94.",
"sig": "a5fd6d04bc63651e85a9792c1532a71e49c5a7440b32c6f38c6cd6d2554726c62556ad1439183632dbab0782ac70362f014daa3d09b15f045990f575d330855f"
}