Post #2545429
2026-05-12 12:57 UTC
@Yuvalne@433.world @signalapp@mastodon.world So you wouldn't want verification of public identities in Signal? Isn't that exactly the problem of people impersonating Signal? The two verifications don't exclude each other. Make it optional, not everyone has a public identity that needs to be verified, but for those who have, it's important.
Also, safety numbers? No one checks them. Maybe you and tech people, but never in my life did someone check others' numbers but me. Even with those numbers people apply scams every single day working around that: "hey, I got a new number! i broke my old phone!" "ok!" then some days later "I'm broke! can you send me some money?". It happens every single day! Even with security numbers!
Would an optional identify verification fix that? No. Would it improve in some cases? Yes.
Replies (1)
-
@Yuvalne@433.world 2026-05-12 13:06
@qgustavor@urusai.social @signalapp@mastodon.world i think you've just demonstrated exactly why website-based verification is maybe not a good idea. something website-based requires you to first know the website. if the two of us are talking, then my safety number changes and the new person who may be me says "hey no worries, it's still me, see my profile even says verified" and that verification points to talya.net, how do you know it's me who owns that domain? and how you know it wasn't talya.xyz before?