NIP-44 is just the encryption. The DM protocol is NIP-17 with NIP-59 and NIP-44. No one uses NIP-44 by itself for messages.
1. NIP-44 has padding for fixed message sizes. 2. NIP-17 DMs is giftwrapped by ephemeral keys in public, so repudiation/deniability is provided as well. Gift wraps can even use random alias keys as receivers.
3. The connection graph is not visible unless the NIP requires it to.
4. Break-in protections exist on the wrap. Breaking individual messages does not reveal the main nsec of the Nostr user. The only way the break-in can work is if the attacker gets the long term key or seed, which is also a problem for other E2E apps.
Vitor Pamplona
npub1gc…fnj5z
2024-08-09 01:15:11
in reply to nevent1q…au8x
Author Public Key
npub1gcxzte5zlkncx26j68ez60fzkvtkm9e0vrwdcvsjakxf9mu9qewqlfnj5zPublished at
2024-08-09 01:15:11Event JSON
{
"id": "09a86fc3bb029ed6a957b282caac1158e54e2a7468f2a444827409f15bbe5e44",
"pubkey": "460c25e682fda7832b52d1f22d3d22b3176d972f60dcdc3212ed8c92ef85065c",
"created_at": 1723158911,
"kind": 1,
"tags": [
[
"e",
"a83d3f95b524ffe728dfd8a89c00b2afe8243299b382e18dc2a10301da9e72c7",
"",
"root"
],
[
"e",
"e6faeeae96f7aecd1f8cd0cb0837eec4b0f1d1739d4a79065a8234733bfcd02d"
],
[
"e",
"facac6d0cc998a07ec5b88a0d000592be4a4eafd5246edda5d48e539e2948d03",
"",
"reply"
],
[
"p",
"0f563fe2cfdf180cb104586b95873379a0c1fdcfbc301a80c8255f33d15f039d"
],
[
"p",
"c998a5739f04f7fff202c54962aa5782b34ecb10d6f915bdfdd7582963bf9171"
],
[
"p",
"1577e4599dd10c863498fe3c20bd82aafaf829a595ce83c5cf8ac3463531b09b"
],
[
"p",
"5eca50a04afaefe55659fb74810b42654e2268c1acca6e53801b9862db74a83a"
]
],
"content": "NIP-44 is just the encryption. The DM protocol is NIP-17 with NIP-59 and NIP-44. No one uses NIP-44 by itself for messages.\n\n1. NIP-44 has padding for fixed message sizes. 2. NIP-17 DMs is giftwrapped by ephemeral keys in public, so repudiation/deniability is provided as well. Gift wraps can even use random alias keys as receivers. \n3. The connection graph is not visible unless the NIP requires it to. \n4. Break-in protections exist on the wrap. Breaking individual messages does not reveal the main nsec of the Nostr user. The only way the break-in can work is if the attacker gets the long term key or seed, which is also a problem for other E2E apps. ",
"sig": "eb5829c6d689074a47fbd503e365126d03219fb52d776dcc2a7dd52c23d97e0b603356e5bdc2571f9dc5bae5f711ea8549ef40b52b4858eb1c1f6c7fb88dc5a9"
}