Post

This feels like disinformation to me. Bluesky uses did:plc which is highly centralized I’d love to be proven wrong, because the world desperately needs a decentralized identity system I’m really hoping that Bluesky sees the light and allows users to actually own their keys

chrisb@boscolo.co

When a platform for social engagement grows large enough, the identity used on that platform becomes a standard for global communication. Telephone network gave us phone numbers. Internet v1 gave us email addresses. Bluesky (AT Protocol) gives Decentralized Identities (DID) 🧵

They do own their keys (you can rotate them and add backups) - PLC holds the identifier and log of actions - did:plc is not a key and isn’t used for signing. The intent is for the (currently centrally hosted) plc directory to be spun out into a separate entity & collaboratively governed.

0 reposts1 like

But.. who owns the identity? Bluesky does, because they can re-key people. It's definitely an admirable intent to decentralize one day. But clearly people are thinking Bluesky already offers sovereign identities. Hence the "disinformation"

disinformation? c'mon. You've made two separate inaccurate comments in your response, which @bmann.ca corrected. Valid critique is welcomed, but calling it disinformation then following up with factually incorrect info is just a waste of everyone's time.

I apologize for saying "disinformation". It was too harsh, because I don't believe you are intending to spread wrong information Also, AtProto does offer some forms of decentralized identity! You said Bluesky. Which, with my limited understanding, does not 😢

I'd LOVE to be wrong on this. I'm a huge supporter of any sovereign/decentralized identity system for the web. In my first post I accidentally said that users don't "own their keys" on bksy. I meant to say they don't own their identity, because you claimed that bsky has decentralized ID

The worst part is that Bluesky pretends that you get a sovereign ID when you add your own domain, but it is just a proxy to the centralized did:plc No wonder people are confused!

The ICANN-governed DNS already exists- already distributed across every nation. To me it feels like this whole mess could have been avoided if bsky used did:web identities (or better, did:dns) The auditing+tamper-resistance features of the ledger can be implemented in a decentralized way, right?!

Sorry for bothering you with this, Boris 😅 I was pretty sure that the bluesky PDS holds a rotation key, as discussed here: github.com/bluesky-soci... Also I'm not sure how the "lost password" workflow (email validation) would possibly work if the bsky service can't rekey my identity

github.comHow to edit `did:plc` rotation keys · bluesky-social atproto · Discussion #3366I have migrated my Bluesky handle rekmarks.com to my own PDS. I am trying to replace one of its rotation keys. Here's what I observe: I check the rotation keys returned by com.atproto.identity.getR...