Oddbean new post about login | logout I have to disagree. SimpleX has much better privacy at the moment. NIP-104 will help once it's complete and implemented in 0xchat, but SimpleX may retain an edge in privacy since users have no identity between chats. We could maybe approximate it by using a new nsec/npub in every chat we join, but I'm not familiar enough with the architecture to say for sure if that'd be fully equivalent.
Thanks for the input and the information. I thought that since it was built on Nostr 🟣 it would perform better with respect to privacy... it's good to keep learning! Thanks, I'll try simpleX too.
Nostr doesn't do a whole lot to protect your privacy at the protocol level. Your npub is public proof that every event you sign was signed by the same person or someone they authorized, unless they got your keys stolen, but whether it can be attached to you depends on your opsec. Relays are allowed to share your events freely to everyone, but they're also allowed to restrict access however they see fit. Encryption schema used for things like end to end encrypted chats are still not as private as competing non-nostr services, but advancements are being formalized so they can be put into use. Ultimately, the privacy nostr affords people will largely depend on how the software is built on top of it. Decentralization will provide a degree of protection, and a much appreciated one, but without stronger protections built into the protocol, it still depends on how we use it.
To match SimpleX, you need to have the same encryption (Signal Double Ratchet Algorithm) + post-quantim ratchets (like Apple & SimpleX have done https://security.apple.com/blog/imessage-pq3/ https://simplex.chat/blog/20240314-simplex-chat-v5-6-quantum-resistance-signal-double-ratchet-algorithm.html ) As well as using pairwise identifiers for messaging queues (separate sending receiving servers and address) which should be done automatically, behind the scenes so users don't have to create a separate identity for each contact.