Name is simply a reference to contact address - a way to connect. Revocable by whom? They are records in blockchain contract, controlled by user key. So not revocable. What's "sessionX"? :) But in general, verification always requires some alternative channel. If say a company publishes the name on the website, then you know that this name is likely controlled by the same entity that controls the website. This is not different from domain names - how do you know they are controlled by entities that you think they are?