OK I will stop shilling cashu (and switch to shilling near-zero-fee Liquid clones) if you explain this to me:

> That's not how encryption or secure encryption schemes work. You can't just use any pubkey and think, you can now encrypt anything with it and still pretend like it's secure. You just rolled your own crypto.

I suspect you're thinking of signatures: indeed, signing random shit with your private key just like that isn't a good idea. But suppose you publish a Nostr pubkey and I encrypt a DM with it (no signatures). How is this unsecure? Aren't gpg users always doing gpg --encrypt --recipient anyway?

> But both lnurl-auth and nostr auth should give SN a pubkey that the zapper can encrypt with

That's not how encryption or secure encryption schemes work. You can't just use _any_ pubkey and think, you can now encrypt _anything_ with it and still pretend like it's secure. You just rolled your own crypto. 

> Unfortunately, users who log in via Google or Facebook will miss all the nutzaps.

Do we support Google or Facebook SSO? Since you sound like you think we do. 

Please stop shilling cashu, I like cashu but you make it look bad, lol

Not immediately, no, because there's no user auth in cashu by design (original Chaum's constuction involved accounts). But both lnurl-auth and nostr auth should give SN a pubkey that the zapper can encrypt with and the only thing that SN ever sees is an encrypted DM.

Unfortunately, users who log in via Google or Facebook will miss all the nutzaps.

Would be happy to sit down with you next week or two to go through setting up a federation and interacting with it. 

I'm open to it. I just don't know enough to say yes to the dress.

Has anyone wrote about these UX-related things in depth somewhere?

k00b

Yes, it's possible. And I'll be working on the fedimint version of this in a week or two. 

Btw I've been testing all the fedinint v0.2 release candidates and it just dropped a few days ago. Offer still open if you want to play with it more. 

TonyGiorgio

[important] foreign asset control compliance

Do you know if cashu supports offline receives?