addendum: I’m reminded of someone linking to Bluesky on a news chyron—the .bsky.social made it clear it was a Bluesky username without an icon 👍
Zach Leatherman 1515 replies 1111 likes Original on Bluesky15 replies
AND, user.bluesky.social in the browser redirects to user's profile page! they're clever
I wonder if @ bsky.domain.tld would be a good convention even for people with domains?
"find me on bluesky at xn--bt9h.example.com"
Now I want to go mess with c names. It's never a good idea to want to mess with DNS.
(oops I mean user.bsky.social here just in case someone gets confused)
Ok I finally got sniped into doing this.
- Added a bsky. subdomain in route53
- Updated and re-verified my handle
- Faffed with ALB redirects for way too longBut bsky.duncanhall.net will now take you my profile.
(No https yet - that overkill can wait until tomorrow)
oddly, I find it easier to do "redirect-only" sites with Cloudfront→S3 routing rules than in an ALB. Not intuitive, but all per-request costs instead of hourly.
(But if you already have the ALB, that works too)
Ooh that sounds way better. Tomorrows procrastination
I like that a lot, yeah!
whew, this post shows that bad actors are taking advantage of the perceived credibility of custom domain usernames to impersonate very popular accounts using .bsky.social usernames 😭 bsky.app/profile/trik...
The linked newsletter cites 1 fake account with a custom domain.
we’re seeing the tension between centralized and decentralized identity though, right
Yes. *cough* indieauth.net *cough*
oh, for the record I don’t think any decentralized solution will solve this specific problem