37
submitted 3 months ago by [email protected] to c/[email protected]
you are viewing a single comment's thread
view the rest of the comments
[-] [email protected] 2 points 3 months ago

Desktop signal yes.

Doesn't having them expire/get reused open them up to impersonation attacks?

[-] [email protected] 3 points 3 months ago

It could, but that's why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.

I'm not sure if Signal mitigates username impersonation in some way though.

[-] [email protected] 2 points 3 months ago

Hopefully by "taken" it means that it is in some kind of cooldown before it can be used again.

this post was submitted on 02 Mar 2025
37 points (100.0% liked)

The Signal messenger and protocol.

2132 readers
1 users here now

https://signal.org/

founded 5 years ago
MODERATORS