37
submitted 3 months ago by [email protected] to c/[email protected]
you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 6 points 3 months ago

Do you have any linked devices, especially ones using Molly?

I wouldn't sweat the username thing too much, as they are not meant to stick around forever by design. Better they break than get compromised.

[-] [email protected] 2 points 3 months ago

Desktop signal yes.

Doesn't having them expire/get reused open them up to impersonation attacks?

[-] [email protected] 3 points 3 months ago

It could, but that's why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.

I'm not sure if Signal mitigates username impersonation in some way though.

[-] [email protected] 2 points 3 months ago

Hopefully by "taken" it means that it is in some kind of cooldown before it can be used again.

this post was submitted on 02 Mar 2025
37 points (100.0% liked)

The Signal messenger and protocol.

2146 readers
32 users here now

https://signal.org/

founded 5 years ago
MODERATORS