SkyLink – Bluesky DID Detector browser plugin

https://github.com/jessejanderson/skylink

by mooreds • 3 years ago

65 18 3 years ago

Aeolun• 3 years ago

I personally like how all this doesn’t seem to require any new protocol or checks. Just plain DNS.

woodruffw• 3 years ago

I'm generally interested in Bluesky (and I'm already using it), but I think DNS was probably the wrong choice for them here: it's not authenticated (and can't easily be authenticated in reasonable ways), and has relatively weak guarantees around propagation, invalidation, etc.

The "well-known" URI scheme[1] was intended to overcome many of these deficiencies, and has worked admirably in other contexts (for example, Let's Encrypt's HTTP-01 challenge scheme[2]). I believe Bluesky also supports a "well-known" flow for domain verification, but it seems like it still isn't the default.

[1] https://en.wikipedia.org/wiki/Well-known_URI

[2] https://letsencrypt.org/docs/challenge-types/

rnk• 3 years ago

How does one get a blue sky account? I requested one. All I see is people offering to sell you one. That seems terrible.

jeroenhd• 3 years ago

With competent DNS providers, DNS can be authenticated very easily through DNSSEC. Whether other people bother to validate that authentication is a whole other problem, but enabling it really doesn't have to be all that hard.

progval2• 3 years ago

Actually it needs to use an HTTP API (because Web Extensions can't send actual DNS requests?): https://github.com/jessejanderson/skylink/blob/a698dd56eda26...

and it looks like it's only resolving domains to DIDs, but not that the DID's owner accepted the domain; so you could make any of your domains point to anyone's DID. The extension would need to use ATP's new protocol to check it.

darnfish• 3 years ago

DNS over HTTP is still a DNS request

prakhar897• 3 years ago

Bluesky needs to get out of Beta or it will be dead in a month when people move on.

whywhywhywhy• 3 years ago

I agree, the people raving about Bluesky and who hate Post-Elon Twitter have never really used Twitter for the community it's always been for the reach being a privileged user on the platform got them.

If it comes down to a community and site they prefer the value of or 40K-100K followers vs 200 or so followers and aligned moderator values, they'll come crawling back to the place with more followers.

Even if they hate Elon Twitter, their reach is still worth more there.

I've got an invite and the content there currently feels very similar to a regular sized Mastodon instance so I think it's existing on borrowed time for the crowd it's genuinely hoping to attract.

flandish• 3 years ago

It’ll be nice when invites open up or I come across one. APIs/interfaces like this are fantastic to watch grow or contribute to on new platforms.

BiteCode_dev• 3 years ago

Twitter started like this as well, let's see their real policy in 10 years when investors, law makers, medias and advertisers pressure them before getting too enthusiastic.

masukomi• 3 years ago

related: There's a similar plugin for Mastodon called StreetPass

https://streetpass.social/

SkyLink – Bluesky DID Detector browser plugin

Related Stories