Post

I wonder how quickly people will find ways of domain work arounds for impersonation Like using a .co domain would probably be missed by people scanning Vs .com Or how does bsky handle pascaIpixeI.com Vs pascalpixel.com

Feels like @bsky.app could add some extra things in to make sure basic attempts like that are caught. Maybe highlighting .com or .co And making it so that I and l don't look the same

I don't know how @bsky.app handles long usernames but another way of spoofing someone else's username could be Subdomains of a really long domain name that overflows the UI and probably gets trimmed username.com.reallylongdomainthatoverflowsbskyui.tld

i presume bluesky converts all domain names to lowercase when adding them. i haven't seen any non-lowercase handles on here yet

genius use of: this problem has already been solved

I’m wondering how renaming works here? Is there a history and redirect?

nope! just tried mine @pascalpixel.bsky.social

Something to improve on, @bsky.app. It would be nice to redirect all previously used handles until someone takes them (GitHub-style)

It's so clever