I agree that the verification UI sucks. I have similar stories about otherwise technical people not knowing about it or otherwise not understanding it.
At the same time: the relevant comparison here is email. Email isn’t even TOFU between arbitrary identities; it’s trust-on-each-message. Similarly for conceptual identities (like a bank’s catch-all address).
(I also agree with your point about this needing to be one of Signal’s businesses. WhatsApp and other chats already do this, I believe.)
At the same time: the relevant comparison here is email. Email isn’t even TOFU between arbitrary identities; it’s trust-on-each-message. Similarly for conceptual identities (like a bank’s catch-all address).
(I also agree with your point about this needing to be one of Signal’s businesses. WhatsApp and other chats already do this, I believe.)