add security warning on nip-04.

This commit is contained in:
fiatjaf 2023-03-07 07:31:21 -03:00
parent 6eb1838921
commit a8fab58526
No known key found for this signature in database
GPG Key ID: BAD43C4BE5C1A3A1

4
04.md
View File

@ -43,3 +43,7 @@ let event = {
content: encryptedMessage + '?iv=' + ivBase64 content: encryptedMessage + '?iv=' + ivBase64
} }
``` ```
## Security Warning
This standard does not go anywhere near what is considered the state-of-the-art in encrypted communication between peers, and it leaks metadata in the events, therefore it must not be used for anything you really need to keep secret, and only with relays that use `AUTH` to restrict who can read your `kind:4` events.