4 ms·
I fail to understand why you would want your security numbers to refresh if there's no known risk of your private key having been leaked or stolen. Every time y
by teawrecks 5y ago
I fail to understand why you would want your security numbers to refresh if there's no known risk of your private key having been leaked or stolen. Every time your keys change and you don't manually verify the new ones you risk a mitm attack. Signal just opts to trade off that risk in favor of convenience and more people using end to end encryption for every day communication. I guess OP is saying the fact that they were transferred to a new phone means they might have been stolen? I disagree.
- ece 5y agoThe flow requires both devices to be in the possession of the account holder for the migration to start, mitigating any risks of foul play. I just tried migrating on my (Android) phones. If an attacker can get you put in your passcode, they don't need to mess with migrating between two phones.