feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)#1185

Draft

wpfleger96 wants to merge 14 commits into

mainfrom

duncan/dm-e2e-encryption

Commits on Jun 25, 2026

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)
wpfleger96
committed
fix: enforce E2E ciphertext across all channel-message kinds and key D1 on the latch

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(relay): gate forum-post and canvas kinds in E2E DM enforcement

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(relay): derive E2E gate from channel-scoped acceptance surface

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
feat: encrypt-on-send and decrypt-at-ingest for 2-party DMs (Phase 1b FE)

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(messages): key DM timeline cache on identity to fix cold-start ciphertext leak

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(messages): decrypt residual DM cache writers to close ciphertext leak

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(desktop): decrypt deep-link/search targets before the rendered DM timeline

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(desktop): hold back DM render targets until identity resolves

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(relay): enforce E2E latch on command-path bodies

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix(relay): fail-visible on DB error resolving approval-note channel

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
refactor(desktop): move DM peer crypto off the main thread

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
docs(security): document E2E gate None-arm and get_nsec key-scope caveat

wpfleger96
authored and
npub1mn7jgtj4w2pd0g0zeuhxsa6jy6p0rewxz4kujt98my82ahfmp72sxjexk7
committed
fix: address review findings on E2E DM encryption
wpfleger96
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)#1185

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)#1185
wpfleger96 wants to merge 14 commits into
mainfrom
duncan/dm-e2e-encryption

Commits on Jun 25, 2026

feat: encrypt 2-party DMs end-to-end with a relay-owned latch (Phase 1)

fix: enforce E2E ciphertext across all channel-message kinds and key D1 on the latch

fix(relay): gate forum-post and canvas kinds in E2E DM enforcement

fix(relay): derive E2E gate from channel-scoped acceptance surface

feat: encrypt-on-send and decrypt-at-ingest for 2-party DMs (Phase 1b FE)

fix(messages): key DM timeline cache on identity to fix cold-start ciphertext leak

fix(messages): decrypt residual DM cache writers to close ciphertext leak

fix(desktop): decrypt deep-link/search targets before the rendered DM timeline

fix(desktop): hold back DM render targets until identity resolves

fix(relay): enforce E2E latch on command-path bodies

fix(relay): fail-visible on DB error resolving approval-note channel

refactor(desktop): move DM peer crypto off the main thread

docs(security): document E2E gate None-arm and get_nsec key-scope caveat

fix: address review findings on E2E DM encryption