4 ms·
The same is true if you use a custom domain for email, for your company's servers, for any number of other critical things. It's no different (and arguably thos
by brundolf 3y ago
The same is true if you use a custom domain for email, for your company's servers, for any number of other critical things. It's no different (and arguably those other things are more catastrophic than losing control of a social media profile)
Also, to emphasize, regular people who don't do those other things don't have to roll a custom domain on bsky (and are unlikely to). But eg. if NPR wants to make a bsky account under @npr.org, that's really quite good verification that it's "the real NPR account", and then nobody has to deal with any of the politics around verification which have become a dumpster-fire on twitter since Musk took over
- giantrobot 3y agoUsing a domain for verification isn't the worst idea but there's still some things to work out. How will the service handle homoglyphs domains? Are they going to ship a webfont that makes homoglyphs obvious? Will they display punycode? It's all well and good the real NPR can use @npr.org but what will ｎｐｒ.org end up looking like on the service? Will it be distinct enough normal users will be able to distinguish it from the real domain as displayed on the website or app?
- brundolf 3y agoAgain, it's a strict improvement over what came before (centrally-managed namespace), and it lumps bsky's problem in with the existing place where the web is already wrestling with these questions. It hitches its cart to the world's biggest and most robust decentralized-identity mechanism; I can't think of a better approach to take, perfect or not.