Leaking the rotation key at the root of all the identities created by a single PDS seems bad, but at least Bluesky isn't still using the same two keys across all of their PDS instances, right?
the pwning continues blog.railway.com/p/security-d...
1 repost0 likes