this post was submitted on 02 Mar 2025
37 points (100.0% liked)
The Signal messenger and protocol.
1916 readers
1 users here now
founded 4 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Desktop signal yes.
Doesn't having them expire/get reused open them up to impersonation attacks?
It could, but that's why in-person or at least out-of-band verification is so important. Usernames are more of a thing you hand out in the moment.
I'm not sure if Signal mitigates username impersonation in some way though.
Hopefully by "taken" it means that it is in some kind of cooldown before it can be used again.