Introducing usernames and phone number privacy on Signal!
We’re making it possible for people to connect with each other without having to share phone numbers. Now launching to beta users, available for everyone soon.
Introducing usernames and phone number privacy on Signal!
We’re making it possible for people to connect with each other without having to share phone numbers. Now launching to beta users, available for everyone soon.
@signalapp fucking finally
@yawnbox Signal server can lookup ACI (account identifier) by username because this is what Signal client asks it for:
https://github.com/signalapp/Signal-Server/blob/4aa42466952ad81a6a48e8fa71ad5c456e71a022/service/src/main/java/org/whispersystems/textsecuregcm/controllers/AccountController.java#L382
getAccountIdentity always returns E164 (phone number) given the ACI:
https://github.com/signalapp/Signal-Server/blob/4aa42466952ad81a6a48e8fa71ad5c456e71a022/service/src/main/java/org/whispersystems/textsecuregcm/grpc/AccountsGrpcService.java#L88
Looks like the server can lookup phone number by username.
@signalapp it seems you have not publicly documented how the usernames feature works in terms of the back-end.
If the Feds subpoena Signal with a username, what data will they get from you? Will they get the user’s phone number? In reverse, if the Feds subpoena a phone number, will they get the associated username? What about one’s history of numbers/usernames?
GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.
All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.