Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add DM leaks metadata warning #1526

Open
alltheseas opened this issue Aug 31, 2023 · 2 comments
Open

Add DM leaks metadata warning #1526

alltheseas opened this issue Aug 31, 2023 · 2 comments
Assignees
Labels
design Design exploration & definition is required dm enhancement Improvement privacy

Comments

@alltheseas
Copy link
Collaborator

alltheseas commented Aug 31, 2023

design

How might we share with user that DMs leak metadata by nostr design?

Should Damus remind user at the start of every new conversation?

Should Damus also suggest that deletion may not be possible?

@robagreda

@alltheseas alltheseas added design Design exploration & definition is required enhancement Improvement privacy labels Aug 31, 2023
@alltheseas alltheseas moved this to Backlog in Damus Roadmap 🛣️ Jul 16, 2024
@alltheseas
Copy link
Collaborator Author

Recently it was revealed non text attachments (e.g. media, images) are stored without encryption on signal desktop. This came as a surprise to signal users. signalapp/Signal-Desktop#5751

Damus NIP-04 DMs should inform user of non-private metadata, and reduce negative suprises.

@alltheseas alltheseas added the dm label Jul 16, 2024
@jb55
Copy link
Collaborator

jb55 commented Jul 16, 2024

Recently it was revealed non text attachments (e.g. media, images) are stored without encryption on signal desktop. This came as a surprise to signal users

damus doesn't store anything unencrypted at rest, and we're in an OS sandbox, so this issue doesn't really apply to us. but yes public DM metadata is a problem.

This should be solved once we switch to something like giftwraps:

@alltheseas alltheseas mentioned this issue Sep 30, 2024
12 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
design Design exploration & definition is required dm enhancement Improvement privacy
Projects
Status: Backlog
Development

No branches or pull requests

3 participants