|
|
|
|
|
|
by Spivak
1601 days ago
|
|
|
Wait what? You specify a username and at least one user-chosen "challenge" in order to verify ownership of it -- phone number, email, password, TOTP, public key which is stored with Signal. Then when you register a new phone you verify the username exactly like you verify the phone number but with the user's challenge. Like it's more effort, but not some intractable problem, at least stated like this. |
|
|