Yes; and because your key is your identity, losing your key or having it stolen basically means that you have to start from scratch; there is no "I forgot my password" mechanism

▲

Cameri 5 days ago | parent | next [-]

For identities to be truly decentralized, there's no one you could run to to ask permission to change your password. Either you own your identity, or someone else does.

Your identity, BinaryIgor only exists in ycombinator, and for as long as ycombinator allows it, and only ycombinator can allow you to change your password. I can't recall how accounts are created here, but likely it also depends on linking it to your email identity as well. If ycombinator disappears, your identity goes down with it.

	▲	BinaryIgor 5 days ago \| parent \| next [-]
		My Nickname on Hacker News - yes; but I own this Identity on at least one more platform and my own website, so it's not that simple :) In general, I think given Identity is more about reputation and familiarity that you gain with people by doing or delivering something under particular name in one or multiple contexts/platforms
	▲	jazzyjackson 5 days ago \| parent \| prev [-]
		Doesn't change the fact that Nostr doesn't have a key rotation mechanism

▲

yellowapple 5 days ago | parent | prev | next [-]

That's where I feel ATproto strikes the right balance: it's basically “What if Nostr but the identity lives on a potentially-self-hostable server instead of the client?”, avoiding that risk of “oh no I lost my private key” while still providing the means to control where one's identity lives and move elsewhere if necessary (even if the current server is uncooperative or no longer exists).

▲

BinaryIgor 5 days ago | parent [-]

Isn't it centralized though, thus defeating the whole purpose?

	▲	yellowapple 3 days ago \| parent [-]
		That depends on what “centralized” means (i.e. whether we're conflating “decentralized” with “federated”, as is usually the case when talking about systems like ATproto, ActivityPub, Nostr, etc.). In any case, AFAICT it's possible to self-host every part of the ATproto stack, and people have indeed done that. Third-party PDSes, relays, and applications/clients can talk to one another and with the ones Bluesky PBC operates. That satisfies the meaning of “decentralized” as most people use it (at least as well as other federated protocols like ActivityPub and email satisfy it).

▲

athrowaway3z 5 days ago | parent | prev [-]

I don't use nostr, but this is one of those really upsetting things where technical people are utterly blinded by their dogma.

How did you register as BinaryIgor? You and ycombinator exchanged a pubkey. ycombinator registered theirs with a DNS register, while you threw yours away.

ycombinator has 100% ownership over your identity. There is no way to prove to me you are you without ycombinator.

Having ycombinator be your naming service is useful, and so any distributed system would be wise to re-implement an analog.

But what a supernet signing scheme offers is in addition to "forgot my password" it also has a "ycombinator disappeared / betrayed our trust" feature where your ID and messages exists outside ycombinator - as long as you remember your password.

What we're currently doing: throwing away our keys and let ycombinator resign our messages with theirs; is bad for the power balance between user and the admin.

	▲	BinaryIgor 5 days ago \| parent [-]
		That's a fair point, but as I've pointed out above, I think that the question of Identity is much broader and more nuanced than just owning a set of keys or nicknames; if you're curious I've written about it here: https://binaryigor.com/centralized-vs-decentralized-identity...