• CameronDevOP
    link
    fedilink
    English
    arrow-up
    2
    ·
    4 days ago

    Desktop signal yes.

    Doesn’t having them expire/get reused open them up to impersonation attacks?

    • LWD@lemm.ee
      link
      fedilink
      English
      arrow-up
      3
      ·
      4 days ago

      It could, but that’s why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.

      I’m not sure if Signal mitigates username impersonation in some way though.

      • CameronDevOP
        link
        fedilink
        English
        arrow-up
        2
        ·
        4 days ago

        Hopefully by “taken” it means that it is in some kind of cooldown before it can be used again.