Account verification

Honest user stories

As a activist, I want to verify the identity of my contacts because be sure that I share my sensitive documents with the right peers.

background:

• Verifying contacts in our docs

• There is no easy way to verify whether a CryptPad contact corresponds to the expected person. Profile pages contain the public key of the users, but they are not signed and hence spoofable.

• Safety number updates on Signal's blog

• Easy doable, both in-person and also over an off-band channel

• User's should be encouraged to do this