Conversation

Notices

1. Embed this notice
   Christine Lemmer-Webber (cwebber@social.coop)'s status on Tuesday, 22-Apr-2025 22:58:09 JST Christine Lemmer-Webber

   So regarding the Bluesky check marks, they're basically the equivalent of TLS certificate authorities, and everyone agrees, yes?

   But I see some "well someone could trust a different set of CAs so maybe it's kinda decentralized?"

   Do you know anyone who installs custom certificate authorities in their browser?

   Me neither.

   • Embed this notice
     Jan Lehnardt :couchdb: (janl@narrativ.es)'s status on Tuesday, 22-Apr-2025 23:01:00 JST Jan Lehnardt :couchdb:

     in reply to

     @cwebber The averages are skewed because of CertificateAuthority George.

   • Embed this notice
     Daphne Preston-Kendal (dpk@chaos.social)'s status on Wednesday, 23-Apr-2025 00:50:41 JST Daphne Preston-Kendal

     in reply to

     @cwebber It looks literally like the next step of ‘speedrunning the history of Twitter’, and they’re installing exactly the same system of haves and have-nots that got everyone so mad last time

   • Embed this notice
     Christine Lemmer-Webber (cwebber@social.coop)'s status on Wednesday, 23-Apr-2025 00:55:17 JST Christine Lemmer-Webber

     in reply to

     Yes, I know, corporations do this for internal things

     Do you know a *person* who has chosen to do this

   • Embed this notice
     FoolishOwl (foolishowl@social.coop)'s status on Wednesday, 23-Apr-2025 02:35:30 JST FoolishOwl

     in reply to

     @cwebber I've only ever seen it suggested as an alternative to overriding browser settings to allow self-signed certificates. The override seems like a lot less work.

   • Embed this notice
     Jackson Mostoller (mostol@social.coop)'s status on Wednesday, 23-Apr-2025 03:43:16 JST Jackson Mostoller

     in reply to

     @cwebber I think(?) Handshake (https://handshake.org/) is one example of a community of people who do this. There’s a few different options for resolving the domains (e.g. https://www.hdns.io/) that I used for a bit. In practice there’s a lot of classic speculative crypto activity (and the reliance of proof-of-work is a huge bummer), but I still think the idea of decentralizing naming and CAs is a cool one!