Re:Bluesky Showed Everyone’s Ass
by giantrobot on Friday May 05, 2023 @06:05PM
(#35835670)
Using a domain for verification isn't the worst idea but there's still some things to work out. How will the service handle homoglyphs domains? Are they going to ship a webfont that makes homoglyphs obvious? Will they display punycode? It's all well and good the real NPR can use @npr.org but what will ｎｐｒ.org end up looking like on the service? Will it be distinct enough normal users will be able to distinguish it from the real domain as displayed on the website or app?
[ Parent
| on HN ]
Again, it's a strict improvement over what came before (centrally-managed namespace), and it lumps bsky's problem in with the existing place where the web is already wrestling with these questions. It hitches its cart to the world's biggest and most robust decentralized-identity mechanism; I can't think of a better approach to take, perfect or not.