mikedilger / nostr-next

Issues with nostr that would require breaking changes to fix
3 stars 0 forks source link

drop AUTH, sign client-to-server messages #12

Open mikedilger opened 1 month ago

mikedilger commented 1 month ago

MACs are your friend. Secure "channels" are notoriously hard to reason about cryptographically, but MACs aren't, so we'd avoid a class of errors if we just used MACs instead of doing AUTH inside a supposedly secure channel.