Conversation

Notices

1. Embed this notice
   Christine Lemmer-Webber (cwebber@social.coop)'s status on Monday, 02-Dec-2024 22:06:51 JST Christine Lemmer-Webber

   in reply to

   • Strypey
   • Jonathan Nogueira

   @strypey @JNogueira Yes I was talking about the vast majority of users who *started on* bsky.social's "mega-PDS node"

   • Embed this notice
     Strypey (strypey@mastodon.nzoss.nz)'s status on Monday, 02-Dec-2024 22:06:57 JST Strypey

     in reply to

     • Jonathan Nogueira

     @JNogueira
     > When she talks about user keys is she talking about Bluesky's hosted PDSes at bsky.social or is she talking about self-hosted PDSes?

     Can you clarify @cwebber?

     > Because Self-hosted PDSes have their own keys and don't depend on bsky.social

     How sure are you about this?

   • Embed this notice
     Jonathan Nogueira (jnogueira@fosstodon.org)'s status on Monday, 02-Dec-2024 22:06:58 JST Jonathan Nogueira

     in reply to

     • Strypey

     @strypey
     > The Bluesky PDSes therefore hold these signing keys custodially on behalf of users, and users log in to their home PDS via username and password. This provides a familiar user experience to users, and enables standard features such as password reset by email.

     When she talks about user keys is she talking about Bluesky's hosted PDSes at bsky.social or is she talking about self-hosted PDSes?

     Because Self-hosted PDSes have their own keys and don't depend on bsky.social.

   • Embed this notice
     Strypey (strypey@mastodon.nzoss.nz)'s status on Monday, 02-Dec-2024 22:07:09 JST Strypey

     in reply to

     "The truth of the matter is: Bluesky controls users' keys, and therefore even if users "move away" they must trust Bluesky to perform this move on their behalf. And even if Bluesky delegates authority to that user to control their identity information in the future, there is still a problem in that Bluesky will always have control over that user's key, and thus their identity future.

     #ChristineLemmerWebber, Nov 2024

     https://dustycloud.org/blog/how-decentralized-is-bluesky/

     #BlueSky #ATProto

   • Embed this notice
     Strypey (strypey@mastodon.nzoss.nz)'s status on Monday, 02-Dec-2024 22:07:20 JST Strypey

     More quotes from #ChristineLemmerWebber, Nov 2024

     https://dustycloud.org/blog/how-decentralized-is-bluesky/

     "I find it surprising and alarming that reusing the same key per user was ever the case."

     Indeed.

     "It feels like this flies in the face of the fundamental goals one would have around building a DID system and it is difficult for me to fathom how such a decision could ever have been made."

     Easy; "move fast and break stuff". Instead of building slowly and carefully from spore to mycelium network, as fediverse devs do.