At the moment the server owner effectively ‘owns’ magazines & communities. Is that the right balance of power? What happens when servers go offline, or server admins go rogue?
In a world where both users and magazines had public and private keys and magazine moderators had the tools to do off-site backups.
Could the magazine moderator then do an unassisted migration to a new place?
They revoke the key that gives the original server the right to host the magazine. They use the key to re-create it on a new server.
Somehow notify all the members the magazine of the new location. The users use their public keys to reclaim their identities and content.
Would that give mods too much power?
It all gets complicated fairly quickly! I think the Bluesky AT protocol is somewhat close to this model for user content, but doesn’t really extend to ‘community’ scale content.
It falls short of a full confederal protocol
While it isn’t practical for most users, if you’re really that concerned about maintaining control of your user account, you could create your own Kbin instance that’s basically just for you. There are hosting services available where you could probably do it for a few bucks a month plus the cost of the domain name. I’ve considered setting something like this up myself.
Obviously this isn’t a viable solution for most people, but it is an option.
@JonEFive I do run an instance that’s just for me https://fledd.it (configured as a news aggregator) it was easy on elest.io. $10/ month is too much for most people though. I don’t think this is the route to mass adoption.
True. It makes me at least think about what other options there are in terms of resiliency for user accounts. Right now we’re back to the wild west days of the internet where you might not be 100% sure that your provider is in it for the long haul. There were so many random email hosts in the 90s and early 2000s with vanity domains. Now, it’s rare to see anything other than Gmail, outlook, iCloud, or hotmail for personal emails. People congregated around the big companies. That’s what worries me about companies like Meta and Twitter getting into the fediverse
@JonEFive I’ve been wondering about separating the ID/auth from the app. Someone recently got Keycloak working and that has some possibilities for federation. Not sure if that really helps though. You still have to trust the keycloak admins
WebauthN maybe? Pretty niche right now, but the threadiverse is quite a techy crowd…
@JonEFive
https://webauthn.guide/
https://webauthn.io/
@JonEFive