You are viewing a single comment's thread from:

RE: Conversations on Ecency.

in Ecency8 months ago

The main concern many people have with social chat systems is privacy - even when encryption is involved. Can you explain a bit about how your system stores and transfers private messaging data? Is the data stored on your servers? Is it truly end-to-end encrypted? Is there a way for users to validate the encryption themselves?
Thanks!

Sort:  

Sure, basically when person creates chat keys, those are separate from Hive keys, that keys used for encrypting your messages. There are already dozen good systems for chats and you don't really need to reinvent the wheel. We just had to make sure, our chat has few properties that gives us flexibility but not total control of the data, meaning data is distrubuted/decentralized and encrypted. So our entire chat is powered by opensource distributed nostr protocol.

Ok, I don't know anything much about how Nostr handles chat - is there a link you can point me to that describes the system you are using in more depth? It's good for me to know, but I also need to be able to explain it others in ways that they can trust and check. Thanks!

Nothing complicated, there is user key and messages are encrypted before they are sent to server. Almost all encrypted chats work similar way, you can learn more here: https://github.com/nostr-protocol/nips/blob/master/04.md

Ah thanks, ok - I see their warning here:

Security Warning
This standard does not go anywhere near what is considered the state-of-the-art in encrypted communication between peers, and it leaks metadata in the events, therefore it must not be used for anything you really need to keep secret, and only with relays that use AUTH to restrict who can fetch your kind:4 events.

I think this is important for people to understand. I will take a deeper look at their model.