this post was submitted on 06 Aug 2023
1463 points (99.0% liked)
Announcements
23360 readers
6 users here now
Official announcements from the Lemmy project. Subscribe to this community or add it to your RSS reader in order to be notified about new releases and important updates.
You can also find major news on join-lemmy.org
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Tbh I think the display names as they currently work are dangerous. What would prevent me from setting my display name to
[email protected]
? Most front-ends would not show that I'm actually not you at first glance.Edit: Misread the question as being about display names. Full unicode support for usernames would be even more dangerous, basically opening the door to unicode homograph spoofing on that level too.
There is discussion regarding your concern in one of the UI PRs.
The display name would stick out like a sore thumb. Either it’s the only one with an @instance.name on it, or it’s the only one with 2 @instance.names.
Which front end would show both names? On (mobile and desktop) web and in Jerboa I only see the display name if it's set. And the only limitation seems to be that a leading @ is not allowed.