Skip to content

Commit 57132a3

Browse files
authored
Added warning to the Semaphore docs (#983)
Update identities.mdx Added warning to the Semaphore docs
1 parent 6ef1697 commit 57132a3

File tree

1 file changed

+5
-0
lines changed

1 file changed

+5
-0
lines changed

apps/docs/versioned_docs/version-V4/guides/identities.mdx

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -87,6 +87,11 @@ You may choose to delegate such functionality to existing wallets such as Metama
8787
3. The user can now recreate their Semaphore identity whenever they want by signing the same message with their Ethereum account in Metamask.
8888
:::
8989

90+
:::warning Privacy risk
91+
If a user signs the **same message** on multiple websites using MetaMask, all those websites will be able to **generate the same Semaphore identity**. This undermines anonymity and may allow third parties to **link identities across platforms** or even **gain control over a user's identity**.
92+
To mitigate this, encourage users to sign **unique messages per application** or implement safeguards that detect and warn about reuse.
93+
:::
94+
9095
## Sign and verify messages
9196

9297
Semaphore V4 uses asymmetric cryptography and in particular EdDSA to generate the identity keys. It is therefore also possible to sign messages and verify their signatures.

0 commit comments

Comments
 (0)