Damus
Open in Damus
Thomas_Viaelo profile picture
Thomas_Viaelo
@nostrich

Building Valtala, encrypted team collaboration on Nostr. Viaelo.

npub1259xg2uhpe96w6f4y83l4s6th3tz54rnee3ftvqyftar4gcfnenqrv4ecgnpub
[email protected]nip05
viaelo.appwebsite
Relays (9)
  • wss://nostr.bitcoiner.social – read & write
  • wss://purplepag.es – read & write
  • wss://relay.primal.net – read & write
  • wss://relay.nostr.bg – read & write
  • wss://onchain.pub – read & write
  • wss://relay.current.fyi – read & write
  • wss://relay.nostr.band – read & write
  • wss://nos.lol – read & write
  • wss://relay.damus.io – read & write

Recent Notes

Johnny · 2d
nostr:nprofile1qqs92zny9wtsuja8dy6jrcl6cd9mc43223euuc54kqzy47365vyeuescnnden making the relay you run unable to read the boards is the right thing to get first, and you already made that call. does th...
 Thomas_Viaelo profile picture
Thomas_Viaelo
@Johnny In the events. A card's CRDT state is JSON encoded and that JSON is what NIP-44 encrypts into the event content, so the event is the state rather than a pointer to it. The on-device store is a projection of what that client has merged, not a second source of truth.

Tags stay plaintext though: kind, author pubkey, timestamp, and two opaque UUIDs for the card and its board. So the relay can tell somebody touched a card somewhere. Not the title, the assignee, the due date, or which column it landed in.
❤️2
Thomas_Viaelo profile picture
Nostr has social clients, and real group chat is arriving. I wanted something different: a place for my team to actually work, a board, a task list, chat, in one encrypted space.

That's what I've been building. Valtala. Your identity is a key made on your device, no account, and the boards and chat are encrypted so only your team, not us and not the relay we run, can read them.

It's a rough early beta, iOS 18+, one device per identity for now. I'd rather have five teams who'll tell me what's broken than a hundred silent installs.

https://testflight.apple.com/join/Yx5dS8C8

If you're on Nostr and you've wanted your tools to work the way your identity does, what would you want a Nostr-native workspace to get right first?

#asknostr
2❤️3
Johnny · 2d
nostr:nprofile1qqs92zny9wtsuja8dy6jrcl6cd9mc43223euuc54kqzy47365vyeuescnnden making the relay you run unable to read the boards is the right thing to get first, and you already made that call. does the task state live in the encrypted group events themselves, or in a separate store the keys unlock?
Thomas_Viaelo profile picture
Nostr has social clients, and real group chat is arriving. I wanted something different: a place for my team to work, a board, a task list, chat, in one encrypted space.

That's what I’ve been building. Valtala. Your identity is a key made on your device, no account, and the boards and chat are encrypted so only your team, not us and not the relay we run, can read them.

It's a rough early beta, iOS 18+, one device per identity for now. I'd rather have five teams who'll tell me what's broken than a hundred silent installs.

testflight.apple.com/join/Yx5dS8C8

If you're on Nostr and you've wanted your tools to work the way your identity does, what would you want a Nostr-native workspace to get right first?

#asknostr
Johnny · 1w
nostr:nprofile1qqs92zny9wtsuja8dy6jrcl6cd9mc43223euuc54kqzy47365vyeuescnnden how do you handle membership changes, does removing someone rotate the group key so they lose access to future boards, or d...
 Thomas_Viaelo profile picture
Thomas_Viaelo
Hi Johnny, nice to meet you. There's no group key, so there's nothing to rotate. Valtala encrypts each board, card, and message separately to each member's own pubkey (NIP-44 fan-out). I chose fan-out specifically to avoid the rotate-and-redeliver-the-shared-key process, which is usually what causes the leak you're describing.

Removing someone is a recipient-set change: from that point, your client stops including their key, so new content cannot be decrypted by them. It's a CRDT membership list, so exclusion occurs as the removal propagates, not as a single global change, but there's no shared secret held in the gap.

What they already decrypted, they keep.
1❤️2🤙1
Johnny · 1w
nostr:nprofile1qyxhwumn8ghj7mn0wvhxcmmvqyw8wumn8ghj7mn0wd68ytnzd96xxmmfdejhytnnda3kjctvqqs92zny9wtsuja8dy6jrcl6cd9mc43223euuc54kqzy47365vyeueskrg20k fan-out sidesteps the shared-secret leak class entirely, that is the right call
Thomas_Viaelo profile picture
I built a team workspace that runs on Nostr, featuring boards, to-do lists, and chat, all encrypted so only your team can read them. Not us, nor the relay we run.

You don't have to take my word for it. During the beta, it publishes to a relay anyone can read from, so point a client at it, and you'll see ciphertext where the boards and messages would be.

It's early and iOS only (18+), with one device per identity for now. I'm looking for a few small teams to try it out and tell me what breaks.

Free beta: https://testflight.apple.com/join/Yx5dS8C8

See more: https://viaelo.app/apps/valtala/

#asknostr #devstr
3❤️2
Johnny · 1w
nostr:nprofile1qqs92zny9wtsuja8dy6jrcl6cd9mc43223euuc54kqzy47365vyeuescnnden how do you handle membership changes, does removing someone rotate the group key so they lose access to future boards, or do they keep the key they already had? that is usually where encrypted team tools quietly leak.
Sam LB · 1w
I’m in the middle of book 6 and I’m really enjoying it. It’s all I’m doing at the moment.
JB | Onchain · 1w
Yea I got those 2 books. One is a self improvement book & the other is more about the stock market history. Decent reads I guess