I Was Right About ATProto Key Management

Note: this post has been revised to be split into two sections: a description of what happened, and my analysis. I hope to make it clear that, while I do not like ATProto in general, I am trying to make good-faith critcisms of specific design decisions and outcomes. Today, I tried setting up an ATProto account for use with Bluesky, with did:web instead of did:plc. Let’s walk through the process: Set up the PDS software on a server I control. Because I use NixOS, this was very easy. Create a did:web. This means creating a public-private keypair; I initially tried following this tutorial from Mai Lapyst, but it’s very out of date, and doesn’t include a critical step. With that did:web, upload the did.json document to my webserver and set the appropriate DNS entries. Easy…

Read more on Lobste.rs