Skip to content

Conversation

@monlovesmango
Copy link
Member

@staab
Copy link
Member

staab commented Dec 7, 2023

This is already part of the NIP 44 PR: https://github.com/nostr-protocol/nips/pull/746/files

@monlovesmango
Copy link
Member Author

ah cool thanks.

should we add getKey for nip44 too?

@staab
Copy link
Member

staab commented Dec 7, 2023

I'm personally against it, I don't think it accomplishes anything that a well-optimized nip 07 extension can't.

@vitorpamplona
Copy link
Collaborator

vitorpamplona commented Dec 7, 2023

Get key should be available on the Android Signer and the NIP-46 Signers. I think we should add to nip-07 just for consistency in case somebody is making a single app that uses all of the 3 signers at the same time.

@monlovesmango
Copy link
Member Author

yeah @pablof7z just added it to the nip46 rewrite pr which is what prompted me to open this. consistency was the main reason I wanted to add it too, but I also agree with @staab that it doesn't really accomplish anything.

@monlovesmango monlovesmango deleted the NIP07-Add-nip44 branch December 7, 2023 19:36
@pablof7z
Copy link
Member

pablof7z commented Dec 7, 2023

+1

I'm with @vitorpamplona ; consistency is good and you can drive a truck through "well-optimized nip07 extension" 😅

@monlovesmango
Copy link
Member Author

I have reopened this in a new PR (github wasn't letting me reopen this one) #940

NIP07 updates were removed from NIP44 PR so opening this again to come to agreement on how nip07 should be updated

@staab
Copy link
Member

staab commented Dec 20, 2023

I haven't been able to track all the changes to this file and NIP 46 that have been proposed, what's the argument for getKey? The downside is that an evil client can exfiltrate conversation keys for all DMs, and since we have no forward secrecy or post-compromise security that gives them access to snoop forever.

Edit, ignore this, I'll re-post in the real PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants