Well, at least they try to solve it. Another approach for verification is employed by Threema [1]: The server verifies email addresses and phone numbers, so if

Well, at least they try to solve it. Another approach for verification is employed by Threema [1]: The server verifies email addresses and phone numbers, so if the address or number is in your contacts you can have more confidence, represented by an orange dot next to the contact. If you verify the fingerprint by scanning QR codes, you get a green dot. About fingerprints for the masses: I really like the visual fingerprints Peerio is using (basically bigger Github-style generated avatar icons). [1] https://threema.ch/en/faq https://threema.ch/en/faq