From b775d2b29bcc2964cbc374771f86ce39d83cb8b7 Mon Sep 17 00:00:00 2001 From: Adam Soltys Date: Sun, 30 Aug 2026 23:01:26 -0700 Subject: Google accounts can speak: the DM seal signs with the present for remote signers (the pomegranate FROST operators refuse backdated events, and NIP-59's tweak on the seal protects nothing — only the recipient ever sees that layer; the public-facing wrap keeps its tweak under our own ephemeral key), and the registrar welcomes each PERSON once instead of once per key — the Google flow's two claims (wallet key, then real npub with the wallet as manager) were earning the same inbox two identical greetings MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Co-Authored-By: Claude Fable 5 Claude-Session: https://claude.ai/code/session_01MrkLsNScXe9b6BviUSdmMr --- src/dm.js | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/dm.js b/src/dm.js index 85498f2..caf6fbf 100644 --- a/src/dm.js +++ b/src/dm.js @@ -33,7 +33,14 @@ export async function wrapDM(skOrSigner, receiverPk, rumor, extraTags = []) { kind: 13, content: await signer.encryptTo(receiverPk, JSON.stringify(rumor)), tags: [], - created_at: tweaked(), + // NIP-59 backdates the seal too, but only the recipient ever sees it + // (it rides encrypted inside the wrap) — and some remote signers, the + // pomegranate FROST operators among them, refuse to sign anything dated + // in the past ("can't sign event in past" killed every Google-account + // DM). A local key keeps the spec's letter; a remote signer signs now. + // The wrap below keeps its tweak either way — the ephemeral key that + // signs it is ours and local, and that's the layer the public sees. + created_at: skOrSigner instanceof Uint8Array ? tweaked() : now(), }); const eph = generateSecretKey(); return finalizeEvent( -- cgit v1.2.3