Articles

The Hard Part of Multi-Device Messaging

The Hard Part of Multi-Device Messaging

MIP-06 proposes the protocol basis for White Noise multi-device group membership, letting each device securely join as its own MLS leaf.

Inside Marmot: Six Specs That Make Private Group Messaging Work

Inside Marmot: Six Specs That Make Private Group Messaging Work

Six protocol specs define how the Marmot Protocol delivers fully encrypted group messaging on Nostr without centralized servers or metadata leaks.

The Problem They Said Could Not Be Solved

The Problem They Said Could Not Be Solved

The builders of the best encrypted messengers declared decentralized group encryption impossible. The Marmot protocol proved them wrong.

The Last Leak: How MIP-05 Closes the Push Notification Surveillance Hole

The Last Leak: How MIP-05 Closes the Push Notification Surveillance Hole

Push notifications let governments track your messaging habits. MIP-05 encrypts device tokens with ephemeral keys, ensuring notification servers learn absolutely nothing.

Know Your Enemy, Name Your Defenses

Know Your Enemy, Name Your Defenses

Good security engineering means naming your enemies. Marmot's threat model specifies exactly which adversaries it defeats and how it defeats them.

Your Phone Without Permission Slips: The GrapheneOS Nostr Stack

Your Phone Without Permission Slips: The GrapheneOS Nostr Stack

GrapheneOS plus Zapstore, Amber, Citrine, Amethyst, and White Noise creates the first phone free from corporate control over your digital life.

The Gossip Vulnerability: Why NIP-17's "Deniable" Messages Aren't

The Gossip Vulnerability: Why NIP-17's "Deniable" Messages Aren't

NIP-17 promises deniable messaging with its three-layer design: an unsigned "rumor," a signed "seal," and an ephemeral "gift wrap." However, this setup has a hidden vulnerability. The signed seal allows recipients to prove that a message was sent by the claimed author, even without revealing the content. This creates a perfect scenario for gossip attacks, where the mere proof of communication can damage reputations. As we explore NIP-17, we find that the rumor, despite being unsigned, is not as deniable as it seems, making it a potential risk for exposure.