ironic how the domain handles system lends authority to an account since you can trust that whoever owns the domain owns the account - and yet the bluesky team themselves don't have one consistent domain: they use bsky.app, bsky.social, bsky.team, atproto.com... makes them way easier to impersonate!
4 3 27Samuel
@samuel.fm
like I own bsky.london and while I don't pretend to be associated with bluesky pbllc, you could imagine a bad actor might try and pull some sort of trick with a domain like bsky.feedback or bsky.gifts
@emily.bsky.team any thoughts on this? Are you worried?
3 1 17oh and blueskyweb.xyz how could I forget
seems like they've set themselves up to *minimize* the benefit of domain handles for them because there's so many official domains to keep track of!
2 12look man,
2 1 15misleading domain handles? who would ever do such a thing
3 8sounds fake to me
1 6yeah, who would ever pick a domain name that could cause them to be confused with a different user
5don't forget the definitely-not-a-cryptocurrency-scam-trying-to-trick-people-into-thinking-they're-affiliated-with-Bluesky-no-sirree account @bsky.global
1 1 6oh shit it already exists!
1 5Ah someone else mentioned too. Yeah, I'd put up a report of it when they popped up on Newskies feed.
1 5They seemed to have updated bio from back then which was asking for some monthly subscription back then.
2yeah why buy @pfrazees.monster and not @pfrazeee.com to cause real chaos 🤔💡
domains aren’t The Perfect Solution out of the box & on their own, but get us a whole lot closer to people being able to own their identity on the web
2 8there’s a larger barrier to impersonation (whatever the cost of the domain is vs just making a new account) and we can couple domain handles with the ability to click into the url straight from your profile 👁️ among other things
2 7plus the company will never be able to take your username away from you because they uh, rebranded and now want your username, since you own your domain
1 3 10this is a long answer to say my take is domains will not solve impersonation bc bad actors are infinitely creative, but it’s an added helpful tool in the toolkit :~) and helps give us ownership over our digital identity while we’re at it
2 2 7Can you expound on this?
1 1You have to go and buy a handle for each impersonation attempt, which would get costly
1 2I meant the coupling and clicking thru part.
1 1I think she just means they can click on the domain to go visit it to see who it is
1 4I understand now. To your point, it's still very easy to impersonate, on a surface level, someone else. When someone see's a post they think is real, they're typically not going to click thru to verify, see the insulin is now free debacle.
1Fwiw, I think domain identities work really well, but y'all might wanna consider keeping all your domains more consistent ;)
What kind of things are you thinking about for future "verification"-type plans? Something web-of-trust-y would probably be a good fit for the decentralized world
1 3don’t ask us how many domains we own…..,,
1 1 15i'll byte, how many
1 8*bite
1 5a coder’s autocorrect lmao
i actually don’t know the exact number but it’s Many
1 8i remember way back in super early bluesky why was using bsky.world lol
but seriously settle on, like, max 3
i'd say bsky.app, bsky.social, and bsky.team
1 6dang i don’t even remember the bsky.world days
1 5Don’t forget the alternative domain, blueskyweb.org
1 6i'm sure it's fine
3