WTF, they actually gave up entirely on sovereign identity?!
"In principle, the cryptographic keys for signing repository updates and DID document updates can be held directly on the user’s devices, e.g. using a cryptocurrency wallet, in order to minimize trust in servers. However, we believe that such manual key management is not appropriate for most users, since there is a significant risk of the keys being compromised or lost.
The Bluesky PDSes therefore hold these signing keys custodially on behalf of users, and users log in to their home PDS via username and password. This provides a familiar user experience to users, and enables standard features such as password reset by email."
Râu Cao ⚡ /
npub1ra…gdees
2024-10-18 20:27:11
in reply to nevent1q…5s2l
Author Public Key
npub1raustrrh5gjwt03zdj8syn9vmt2dwsv9t467m8c3gua636uxu89svgdeesPublished at
2024-10-18 20:27:11Event JSON
{
"id": "943755242d833f522225d31bc3d65affe7ca71793dde3b46718db18f59834dfd",
"pubkey": "1f79058c77a224e5be226c8f024cacdad4d741855d75ed9f11473ba8eb86e1cb",
"created_at": 1729283231,
"kind": 1,
"tags": [
[
"e",
"579035535f27e1339507ee22586dd68c76e55bd572f7aa4fc771a707211f2fe9",
"",
"root"
],
[
"e",
"579035535f27e1339507ee22586dd68c76e55bd572f7aa4fc771a707211f2fe9",
"",
"reply"
],
[
"p",
"76c71aae3a491f1d9eec47cba17e229cda4113a0bbb6e6ae1776d7643e29cafa",
"",
"mention"
],
[
"client",
"noStrudel",
"31990:266815e0c9210dfa324c6cba3573b14bee49da4209a9456f9484e5106cd408a5:1686066542546"
]
],
"content": "WTF, they actually gave up entirely on sovereign identity?!\n\n\"In principle, the cryptographic keys for signing repository updates and DID document updates can be held directly on the user’s devices, e.g. using a cryptocurrency wallet, in order to minimize trust in servers. However, we believe that such manual key management is not appropriate for most users, since there is a significant risk of the keys being compromised or lost.\n\nThe Bluesky PDSes therefore hold these signing keys custodially on behalf of users, and users log in to their home PDS via username and password. This provides a familiar user experience to users, and enables standard features such as password reset by email.\"",
"sig": "de707b12a91299d70facf32ccf712d726fbb2ed781a0e732b0b8b6a8be324142999c8935ae1a7ba911fdfe8fafaa63070764d953251e0c9bfa1e9194cf6fc470"
}