I would like to see a button added to the QR code dialog to copy one’s own key fingerprint to the clipboard, for the purposes of publishing it in e.g. one’s website or social media profiles etc.
Of course the key fingerprint is part of the QR code, so:
A savvy person could extract their profile fingerprint from a copy of their profile URL, but that is not the simple operation I think it should be;
a person publishing their QR code would publish the key fingerprint, but at the expense of allowing anyone with a DeltaChat account to try and contact them, which would open the door to spamming and/or DoS through mass invitations.
REMARK: I am aware of Allow to copy contact's key fingerprint , but that feature request is about copying others’ fingerprints for e.g. identity checking purposes, not one’s own.
Expected behavior
In the dialog where the QR code is shown and the URL can be copied, I would like a button labeled “Copy my fingerprint” which would, well, copy my fingerprint to the clipboard.
Actual behavior
No such button is available. As a rather computer-savvy person, I can copy the URL and extract the fingerprint manually, but I don’t think that is an easy process for all Delta Chat users.
Example Images
None — It’s just a matter of adding a button to the existing QR code dialog, and I’m not a UI person
So basically the idea is to let others verify the fingerprint, but be unable to get in contact with you (unless they are already in contact)?
Sounds interesting.
Though I’m thinking that this might be a bit of an uncommon use case, and having such a feature too in-the-face might confuse people as to what it’s even for, diverting attention from what they actually need (i.e. just scan the QR). Maybe what we’d want instead is to make it safe to share your invite link publicly.
Another way to get your fingerprint:
Right-click a chat with anyone
View Profile
“Three-dot” menu
Encryption Info
The dialog will show your contact’s and your fingerprints.
Exactly. It’s not about others inviting you, it’s about other being invited by a “you” and checking that it is indeed the genuine “you”.
Thanks — I think it’s a “low-investment”, nice thing to have, and it can help against impersonations.
I think that as far as how confusing it is, fingerprints are no different than URLs.
(I’d even go as far as saying that making Delta Chat users aware that fingerprints “equals” profile would be a good thing, but that’s another debate.)
Indeed! But then, it requires a conversation to exist. When creating a new profile with the intent of making it public-facing, there may not be a conversation available yet.