Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NIP-09 - add NIP-17 Enable deletion request for holder of pubkey destination? #1735

Open
trbouma opened this issue Feb 2, 2025 · 5 comments

Comments

@trbouma
Copy link

trbouma commented Feb 2, 2025

Is it possible to add deletion requests for NIP-17 based on what pubkey the message is encrypted to?

It offsets an attack where an attacker sends me unwanted messages, then claims I have read them. Under duress, I am forced to reveal the messages.

Giving NIP-17 deletion request doesn't go the full way, but I would eventually support only relays that enable this for me.

Rationale - I am using NIP-17 to transmit/receive ecash and sensitive records. I want them to disappear at my own action or over time.

Whaddya think?

@trbouma
Copy link
Author

trbouma commented Feb 2, 2025

I am also experimenting with an event kind 21059 which I am calling TemporaryGiftWrap - an ephemeral event that meets my requirements as well.

@vitorpamplona
Copy link
Collaborator

DM Inbox relays do delete gift wraps that p-tag the key requesting the deletion. I think that should be the standard for giftwraps.

@staab
Copy link
Member

staab commented Feb 2, 2025

Yes, and I agree even though I used to be opposed to it because it breaks shared keys. But we can just use a different kind if that becomes necessary.

@mikedilger
Copy link
Contributor

I don't see in NIP-17 or NIP-09 anything about relays deleting. In fact NIP-09 deletions are for clients, relays just pass on the request.

I'm in favor of this and I think we need to spell it out somewhere.

@trbouma
Copy link
Author

trbouma commented Feb 7, 2025

Thanks for the comments everyone. I am implementing a secure record transmittal and secure auth capability that uses NIP-59/44 and a variant of NIP-17 (events other than 1059) - not yet fully baked and exploring requirements that might land in a NIP.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants