Re:Bluesky and the at Protocol
by steveklabnik on Tuesday February 06, 2024 @02:12PM
(#39279049)
Yes, I agree this is a weak point. It's also one that the team is aware of and seemingly has the right amount of discomfort with. I see temporary compromises like this as an example of the pragmatic decision making needed to ship, and trust that they will do the right things here, but I also understand some skepticism.
[ Parent
| on HN ]
Re:Bluesky and the at Protocol
by sleepybrett on Tuesday February 06, 2024 @02:30PM
(#39279300)
It's not a 'weak point' it's a fatal flaw.
Re:Bluesky and the at Protocol
by steveklabnik on Tuesday February 06, 2024 @02:33PM
(#39279355)
Given that it is a non-essential part of how the protocol works, I disagree, but I understand that reasonable people may differ.
PLC uses signed logs similar to certificate transparency. We have a lot of options for where to take it. There may be a distributed/decentralized hosting system if we can settle on a consensus model we're comfortable with. Otherwise it will be some kind of org management model.
The other direction we've got is did:web, which is already used in some cases, and has some tradeoffs but is a strong option.