threeseries on Nostr: That's doable, although it involves the sender revealing themselves at every hop ...

That's doable, although it involves the sender revealing themselves at every hop since their pubkey is needed to decrypt.

I eventually decided it's simpler to use a new key to do the initial encryption and then not bother with any hops, but supposedly that it is one thing people have issues with. (There's also the issue of losing your own sent DMs if you don't remember those one-off keys. Perhaps a self DM could work here.