3 ms·
Using a domain for verification isn't the worst idea but there's still some things to work out. How will the service handle homoglyphs domains? Are they going t
by giantrobot 4y ago
Using a domain for verification isn't the worst idea but there's still some things to work out. How will the service handle homoglyphs domains? Are they going to ship a webfont that makes homoglyphs obvious? Will they display punycode? It's all well and good the real NPR can use @npr.org but what will ｎｐｒ.org end up looking like on the service? Will it be distinct enough normal users will be able to distinguish it from the real domain as displayed on the website or app?
- brundolf 4y agoAgain, it's a strict improvement over what came before (centrally-managed namespace), and it lumps bsky's problem in with the existing place where the web is already wrestling with these questions. It hitches its cart to the world's biggest and most robust decentralized-identity mechanism; I can't think of a better approach to take, perfect or not.