@keithpp @CobaltVelvet
That's the problem of digital identity. If you *need* to distinguish yourself from fakes, you can use a PGP key/Keybase/whatever, like you said in your post
This is actually good because it makes users more aware of these issues and how to solve/mitigate them.
However, you're really right on the "what if the server shuts down?". Mastodon needs account migration tools or the federation will not work in the long run.
@lou1306 @CobaltVelvet Someone who has finally grasped what I am raising, rather than finding excuses for flawed design, that people have to work around.
@CobaltVelvet @keithpp
@keithpp @CobaltVelvet
Yes, exactly! Not saying it is a "flaw" (fatal or not) but I get @keitpp point.
The only alternative is to ask for a PGP sig at registration time: but that's way too awkward for the average user. And who can guarantee the PGP sig corresponds to the real person, anyway?
@lou1306 @CobaltVelvet That solves a different problem, who or what is that digital entity you are communicating with. Which is where signed pgp key is key. I though am referring to more specific problems of multiple @keithpp across this network.
@keithpp @CobaltVelvet @lou1306
i'd argue you guys are trying to solve for a thing that doesn't exist.
indeed, canonical identification is a thing solved by the likes of pgp keys. however, the problem is identity as a construct is more fluid. people have different core identities for different interaction spaces. for example, i have a different identity to my in-laws than i do on the irc servers i participate on.
another instantiation of my identity? m3mnoch@octodon.social
@keithpp @lou1306 @CobaltVelvet Again, I've got no skin in the game, but I think calling it a "flawed design" is disingenuous. Just because you don't agree with the tradeoffs doesn't mean it's flawed.
It'd be like me arguing the domain name system is flawed because I don't get codydh.net when I register codydh.com. It's just not how it works.
@keithpp @lou1306 but it's still the exact same problem with e-mail, I don't see that difference you make. Would be great if you explained it exactly before going meta.
Identity is a global problem, there are fake accounts on Twitter and Facebook too, there are *many* fake e-mail accounts. Crypto and secondary channels are the only solutions. And fortunately, the solutions made for Twitter and E-Mail work here too.