DataKnightmare is a user on octodon.social. You can follow them or interact with them if you have an account anywhere in the fediverse. If you don't, you can sign up here.

what if every toot had a qr-like cryptographic signature next to it, so you could even verify toots on screenshots shared somewhere else

what if we had a federated standard for that & signing arbitrary content & fetching keys for a domain and local key identifier

pretty sure that's already part of a PKCS...

Who owns the keys: instance, but an instance could technically let the client keep it for added security and just keep a public key index and confirm ownership of a pubkey for the domain.