Note: I don’t quite know how the decentralized internet is working so terms may be ambiguous.
When trying to sign-in to an app, would it be possible to make a button to find and connect a users username to their ID-XX…XX if it is not showing up connected to the ID-XX…XX.
My thought is along the lines of type in your “username.” It searches explorer or registrar and if the ID-XX…XX’s match, the username is propagated to the storage spot that the app is using to pick your identity.
My thought on hacking this is sending a false ID-XX…XX with the username find request (to the explorer/registrar) so the hacker can obtain someone else’s username on their ID-XX…XX.
I also don’t really know how that hack would work.