Sadly, I have reverted course for the time being and removed the Marmot Protocol for MLS encrypted group chats on #Nymchat.
It appears to be far too experimental than I realized at this time and needs further testing, tuning, etc. A lot of folks couldn't get the messages to work or some people could publish a keypackage and others not making invites janky. It also seems unreliable for any sort of restore state, which caused the group to become corrupted. It's also disappointing that only a single admin in the commit can invite/kick members unless all group members are admins.
I need to keep tinkering to see if it's worth pursuing further, but for the now the battle-tested NIP-17 group chats work beautifully.
They of course, just come with the caveat of possible timing attacks that might infer group member pubkeys and there's no forward secrecy. However, the message contents of NIP-17 group chats are still e2ee. I just wouldn't recommend them for absolute mission-critical comms. Otherwise, shitposting with your friends is fine.
https://nymchat.app
Luxas
npub16j…733sv
2026-04-02 16:29:12 UTC
Author Public Key
npub16jdfqgazrkapk0yrqm9rdxlnys7ck39c7zmdzxtxqlmmpxg04r0sd733svSeen on
wss://nos.lolPublished at
2026-04-02 16:29:12 UTCEvent JSON
{
"id": "cad7b5fb67c502614fdfaaec47289a1db70fc79e86ee522ab7cd85ffa2340f81",
"pubkey": "d49a9023a21dba1b3c8306ca369bf3243d8b44b8f0b6d1196607f7b0990fa8df",
"created_at": 1775147352,
"kind": 1,
"tags": [
[
"client",
"Yakihonne",
"31990:20986fb83e775d96d188ca5c9df10ce6d613e0eb7e5768a0f0b12b37cdac21b3:1700732875747"
],
[
"t",
"Nymchat."
]
],
"content": "Sadly, I have reverted course for the time being and removed the Marmot Protocol for MLS encrypted group chats on #Nymchat.\n\nIt appears to be far too experimental than I realized at this time and needs further testing, tuning, etc. A lot of folks couldn't get the messages to work or some people could publish a keypackage and others not making invites janky. It also seems unreliable for any sort of restore state, which caused the group to become corrupted. It's also disappointing that only a single admin in the commit can invite/kick members unless all group members are admins.\n\nI need to keep tinkering to see if it's worth pursuing further, but for the now the battle-tested NIP-17 group chats work beautifully.\n\nThey of course, just come with the caveat of possible timing attacks that might infer group member pubkeys and there's no forward secrecy. However, the message contents of NIP-17 group chats are still e2ee. I just wouldn't recommend them for absolute mission-critical comms. Otherwise, shitposting with your friends is fine.\n\nhttps://nymchat.app\n",
"sig": "5bfa2a86b2b7524b4da9fab7c12f1bb45f976632561772355616359626cff389a0afe34f1d5e8b38661e858f30fc984fe2bf76790f37c1985afc6a096c568c0f"
}