It's a protocol issue because signers can't possibly inform what is supposed to be decrypted (not even the kind, apparently). A malicious app could tell you it's for "encrypted settings" or whatever, and instead use it to pull your nutzaps and rug you.
DMs are just one kind of thing that can be encrypted. Obviously allowing all makes that even worse.
Zapstore
npub10r…jt2p8
2026-05-12 12:47:58 UTC
in reply to nevent1q…fkax
Author Public Key
npub10r8xl2njyepcw2zwv3a6dyufj4e4ajx86hz6v4ehu4gnpupxxp7stjt2p8Published at
2026-05-12 12:47:58 UTCEvent JSON
{
"id": "b5f2a267a675ff05207be93ce716241716540eadb816fc4bce0946644d990674",
"pubkey": "78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d",
"created_at": 1778590078,
"kind": 1,
"tags": [
[
"e",
"d79fba05b4e58a05de88a113f0fca4cba046f0b694abff5239b802fba40f6d25",
"wss://relay.primal.net/",
"root",
"78ce6faa72264387284e647ba6938995735ec8c7d5c5a65737e55130f026307d"
],
[
"e",
"1f0b62af31eb59d5c27675e8b0ef27e3fe0fb30ce3aa27ebb8d24b11fe335c55",
"wss://nos.lol/",
"reply",
"3cea4806b1e1a9829d30d5cb8a78011d4271c6474eb31531ec91f28110fe3f40"
],
[
"p",
"3cea4806b1e1a9829d30d5cb8a78011d4271c6474eb31531ec91f28110fe3f40"
]
],
"content": "It's a protocol issue because signers can't possibly inform what is supposed to be decrypted (not even the kind, apparently). A malicious app could tell you it's for \"encrypted settings\" or whatever, and instead use it to pull your nutzaps and rug you.\n\nDMs are just one kind of thing that can be encrypted. Obviously allowing all makes that even worse.",
"sig": "e709e5535eae917bc89fed8fd0e2c6c7d8683585dd574e1fb4e1cca68b7ee10d63bb1b0073bf11608eed1a47dffa35f2abe3fa4ab34d779da5047a71e0ba6baf"
}