I am sure it was discussed here before, but I can’t find a good way to search this community.
Are there any arguments against having a user’s identity federate, and be compatible across platforms?
For example, let us say I sign up with my instance, matcha_addict@lemy.lol
But what if I go on mastodon, and I want to have my own micro blog. Or maybe go to write freely and post some blog posts. I’d have to make a different account on each one.
What if mastodon or write freely could just let me log in with my lemmy account (or lets call it federated account). This has several benefits:
- users don’t have to scratch their head on if I am the same person or not across these platforms
- theoretically, someone following my feed can get updates on what I do on multiple platforms
Now I understand this would be difficult to implement and iron out all the edge cases, but am I missing anything on why it wouldn’t be a desirable feature, given it is implemented?
The proposal I saw was basically a way of “signing” your posts, and then when they federate somewhere else, you can create an account on another instance and “claim” the posts that have federated there as yours, with your private key.
Obviously, you couldn’t access posts that never federated to the instance in the first place, but even with some lost content, it would let you edit, and post new content.
And as I understood this proposal, basically, you could have multiple active accounts, all of which are “you”, and allow you to control your content with the same permissions.
Yea that could in theory be possible - the big problem is that it requires people to hold their own private key and manage that, both securely and conveniently. And well… tbh I just don’t see that happening. If you need to keep your own private key and also keep your own password, I really don’t see any non-techie people ever using the fediverse.
There’s also the issue that if that private key is leaked, there is no going back. Your identity is stolen and you can do nothing to take it back. This is different from if your password gets leaked - in that case, an admin could in principle step in and reset your password and you could regain control of your account. This happens all the time when people’s Facebook accounts get “hacked”. They report it to Facebook and get their account back. This is impossible if it relies on a user-held private key.
It’s a neat technical solution that unfortunately forgets the human, as is often the case.
Why would you need a password if you already have a private key?
Also, one possible way to manage private keys is to split the key (and the risk/burden) using shamir’s secret sharing and use that process for key recovery if you ever lose it. For example you split it among 6 people you trust and to recover the key, 4 of them need to give you a fragment of it.
https://en.m.wikipedia.org/wiki/Shamir's_secret_sharing
Yea in theory you wouldn’t need the password if you have the private key but here the key is only used for signing, maybe not for login. If it also needs to be backwards compatible. In any case, I don’t think user-held private keys is viable.
Sharing with trusted parties… I dunno, I think again it’s too technical and complicated to do it. And you’d need people on the platform you trust to already be there.
No, the key fragment is just a bit of text you can send to them by whatever secure side channel you want down to handing them a flash drive. Then when you need to recover the key you ask for it back
Normal non-technical people are never going to do this. It needs to be easy as clicking a button, otherwise it will never happen for them. Again, this is a neat technical solution but it completely forgets the human.