Desktop signal yes.
Doesn't having them expire/get reused open them up to impersonation attacks?
It could, but that's why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.
I'm not sure if Signal mitigates username impersonation in some way though.
Hopefully by "taken" it means that it is in some kind of cooldown before it can be used again.
https://signal.org/
Desktop signal yes.
Doesn't having them expire/get reused open them up to impersonation attacks?
It could, but that's why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.
I'm not sure if Signal mitigates username impersonation in some way though.
Hopefully by "taken" it means that it is in some kind of cooldown before it can be used again.