NIP 47 using deprecated NIP 04 for encryption

[Gudnessuche]

Is it prudent to move to NIP 17 or NIP 44 for encryption, giving that NIP 04 leaks meta data?

[vitorpamplona]

Already happening: #1531

[Gudnessuche]

@vitorpamplona why has this not been merged?

[vitorpamplona]

As always, we need 2+ implementations to catch up to it before the merge.

[Gudnessuche]

Alby says they implement this, doesn't Amethyst use nip 44 as well?
Boardwalkcash also uses itI suppose.
Nostrudel?

[vitorpamplona]

Not as they wrote. We dynamically pick if it is NIP-04 or NIP-44 by the contents and not by the v tag. But because this is such a breaking change, we might need to wait for more apps to be ready before merging

[Gudnessuche]

Given this is a security risk, wouldn't you rather we prioritized security?
Your PR looks fantastic to go imo.

[vitorpamplona]

I wouldn't call it a security risk...

But regardless of what it is, the NIP repo is a reflection of reality as opposed to an imposer of reality. We need lots of people to adopt specifications/changes before things get merged.