3 ms·
> The DID itself is derived from the sha256 hash of the first operation in the log. It is then base32 encoded and truncated to 24 chars. https://atproto.com/sp
by evbogue 3y ago
> The DID itself is derived from the sha256 hash of the first operation in the log. It is then base32 encoded and truncated to 24 chars.
https://atproto.com/specs/did-plc#how-it-works https://atproto.com/specs/did-plc#how-it-works
They could be using public keys as identifiers, why are they using nonsense?
- UncleEntity 3y agoWould public keys be recoverable without having the private key, one of their objectives? They also say: “We're actively hoping to replace it with something less centralized.”
- evbogue 3y agoThey could replace it with allowing you to hold onto your own keypair.
- jazzyjackson 3y agobecause they want the ability to perform key rotation
- evbogue 3y agowell exactly. If they hold onto your private keys for you, then they can keep you from losing them and also give you a new public key on a set schedule. but they're also holding into your private keys for you, which comes with some risks.