Post

bluesky doesn’t need verified status because we can use *our actual domain names as handles* (」°ロ°)」

Feels like @bsky.app could add some extra things in to make sure basic attempts like that are caught. Maybe highlighting .com or .co And making it so that I and l don't look the same

I don't know how @bsky.app handles long usernames but another way of spoofing someone else's username could be Subdomains of a really long domain name that overflows the UI and probably gets trimmed username.com.reallylongdomainthatoverflowsbskyui.tld

i presume bluesky converts all domain names to lowercase when adding them. i haven't seen any non-lowercase handles on here yet