This is an alpha release of the new GiftWrapped DMs. Please do not consider anything to be private until we have a stable version. This is early and there might be bugs that leak information.
This implementation is very similar to how Slack manages direct DMs to multiple users. If three users are having a conversation and want to add a forth person, the forth's user will not see the past. This guarantees maximum privacy: only the receivers of a message at the time of writting will ever be able to decrypt it.
The claims of this new method are:
- Messages are encrypted with a superior XChaCha algorithm to each participant's public key individually.
- Chat participant identities, each message's real date and time, event kinds, and other tags are all hidden from the public.
- Senders and receivers cannot be linked with public information alone.
- Minimal trust in counterparties: Counterparties cannot expose verifiable details of your message, including the metadata, without exposing their entire user and all of their other messages (private key)
- There is no central queue, channel or otherwise converging event id to link or count all messages in the same group.
- There is no moderation role (i.e. no group admins, no invitations or bans)
- There is no chatroom secret that can leak or be mistakently shared
- Messages can be fully recoverable in any client (that implements NIP-24) with the receiver or the sender's private key
- The protocol's messages can flow through public relays without loss of privacy. Private relays can increase privacy further, but they are not needed.
- The protocol is extensible to make any other event kind fully private (private likes, private reports, private long-form content, etc)
In the near future, we will implement Forward Secrecy
- Users will be able to opt-in for "Disappearing Messages" that are not recoverable with their private key
- Users will be able to also opt-in to sharing messages with a new key exclusive for DM backup and recovery.
You can activate this mode by clicking in the Incognito icon on the Chat screen. For now, only Amethyst supports this NIP. Thus we recommend only testing with other Amethyst users. Coracle and 0xChat are finishing their implementations in the upcoming days/weeks.
- Support for NIP-24 Private Messages and Small Groups
- Support for NIP-59 Gift Wraps & Seals
- Support for NIP-44 Versioned Encrypted Payloads
- Support for XChaCha encryption algorithm
- Fix: Loading of Alby's NWC URI
- Fix: Only requests notification permission once.
- Fix: Show reposts and reactions in search
- Fix: Signed byte used for array slice inside the TLV by @npub1xpuz4qerklyck9evtg40wgrthq5rce2mumwuuygnxcg6q02lz9ms275ams
- Fix: Global feed only shows events from Global-active relays by @npub10npj3gydmv40m70ehemmal6vsdyfl7tewgvz043g54p0x23y0s8qzztl5h
- Updates Dutch translations by @npub1w4la29u3zv09r6crx5u8yxax0ffxgekzdm2egzjkjckef7xc83fs0ftxcd