Oddbean new post about | logout
 There was something in the audit about changing the process so the mac works, nostr:nprofile1qqs8evfumcr8pevs7qkta84qlnc7qhkmchxg5syhx8a9gdjyqxqu78gpz4mhxue69uhhyetvv9ujuerpd46hxtnfduhsz9rhwden5te0wfjkcctev93xcefwdaexwtcpzdmhxue69uhhqatjwpkx2urpvuhx2ue0czrd8m  I've been meaning to ask if you incorporated that into the final version? 
 Yes, the audit requests have been incorporated into the current version. 
 Ok, there's still this text in the NIP:

> Encrypt-then-mac-then-sign instead of encrypt-then-sign-then-mac: only events wrapped in NIP-01 signed envelope are currently accepted by nostr.

So is that not accurate any more?