AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 19 Bitcoin

plugin: nwc: change default relay used for new NWC connections

Public commit record

What the developer wrote

Authored by f321x

85/100 · Strong
plugin: nwc: change default relay used for new NWC connections

The default relay is the one that is positioned first in a NWC
connection string. This matters because most clients only use the
first relay and ignore the following ones.

We set the Alby relay as default because they operate it specifically
for NWC.
However it doesn't seem to work anymore, client requests time out.
I suspect they drop NIP-04 encrypted events to push wallets
to implement the newer NIP-44 encryption.
We should eventually implement this.
The primal relay happily accepts NIP-04 encrypted NWC events so
lets use this as default.
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Explains rationale or failure mode
The short version

What changed, and why it matters

This commit simply changes the default internet relay address used by Electrum's NWC (Nostr Wallet Connect) plugin from Alby's server to Primal's server. It is a configuration change, not a code vulnerability fix. The commit message explains that Alby's relay appears to be timing out for older encrypted messages, so the developers are switching to a relay that still accepts them. There is no security bug being patched here.

Recommended action

No security action required. Users relying on the NWC plugin may wish to verify their preferred relay continues to function, and the project should monitor Alby/Primal relay reliability and plan NIP-44 support as noted in the commit message.

Security signals we found

01

No vulnerability fix present

02

Default third-party service endpoint changed

03

Operational reliability change for NWC relay

04

No cryptographic, authentication, or authorization changes

Risk score

Why this scored 19/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 3/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.