Skip to content

Replace UUID with public key as unique user ID #60

Description

@LGro

UUIDs are more prone to impersonation because they are not backed up by ownership of a private key like a public key would be.

Attack scenario: I learn about a user's UUID and create a new account with that UUID, attempting to connect with others.

Whereas with a public key, as long as it also comes with a signature that can be verified, this attack is not possible.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions