Comment by endisneigh

4 years ago

> Email addresses aren't really good for this. It's really easy to sign up for a service with someone else's email address, for example. Sure, if that person ever finds out they can potentially claim ownership of the account through a password reset, but it doesn't erase the fact that you have been using their "identity" for some time.

This is also true of a private key, in fact it's literally the same scenario...

Presumably a service that allows you to register using a public key as a unique identifier would require you to sign something with the private key.