Bluesky Is a Scam

Re:Bluesky Is a Scam by evbogue on Monday May 08, 2023 @12:55AM (#35858246)

> The DID itself is derived from the sha256 hash of the first operation in the log. It is then base32 encoded and truncated to 24 chars.

https://atproto.com/specs/did-plc#how-it-works

They could be using public keys as identifiers, why are they using nonsense?

[ Parent | on HN ]

Re:Bluesky Is a Scam by UncleEntity on Monday May 08, 2023 @01:52AM (#35858546)

Would public keys be recoverable without having the private key, one of their objectives?

They also say: “We're actively hoping to replace it with something less centralized.”

[ Parent | on HN ]

Re:Bluesky Is a Scam by evbogue on Monday May 08, 2023 @12:20PM (#35863418)

They could replace it with allowing you to hold onto your own keypair.

[ Parent | on HN ]

Re:Bluesky Is a Scam by jazzyjackson on Monday May 08, 2023 @01:52AM (#35858547)

because they want the ability to perform key rotation

[ Parent | on HN ]

Re:Bluesky Is a Scam by evbogue on Monday May 08, 2023 @12:19PM (#35863405)

well exactly. If they hold onto your private keys for you, then they can keep you from losing them and also give you a new public key on a set schedule.

but they're also holding into your private keys for you, which comes with some risks.

[ Parent | on HN ]