Comment by spartanatreyu
5 days ago
> Contrast this with DNS-based handles on Bluesky, for example. All I need to do to change hosting providers there is changing a TXT record.
Mastodon has a similar external identity pointer feature. It uses a html tag on the page the A record points to (which IMHO is better since we don't want anyone with just enough information to be dangerous to break their own DNS).
But the html tag is used to verify an account as the authentic account, not to handle redirects from one account to another.
Personally, I'm not sure I'm a fan of using an external identifier to also handle redirects...
If a social media handle gets hacked, you can put a notice on your website saying "Don't trust any account except this one: <link to your new account>", and by the same token: if your website gets hacked, you can put a note on your social media.
But with the external identifier controlling redirects, if your website gets hacked (or nameserver with the dns method), then both your website and social media are compromised at the same time.
No comments yet
Contribute on Hacker News ↗