The Nexus of Privacy<p>The fedi discourse on Bluesky's verification is very frustrating Don't et me wrong, there's a lot to critique with Bluesky's approach of combining their own platform-level verification with initially annointing a handful of third-party verifiers:</p><ul><li><p><a href="https://bsky.app/profile/rudyfraser.com/post/3lndtfklhbk25" rel="nofollow noopener noreferrer" target="_blank">community-oriented verification</a>, along the lines that <span class="h-card" translate="no"><a href="https://bsky.brid.gy/r/https://bsky.app/profile/rudyfraser.com" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>rudyfraser.com</span></a></span> suggests, would be much more power-distributive and equitable</p></li><li><p>as <span class="h-card" translate="no"><a href="https://bsky.brid.gy/r/https://bsky.app/profile/ngerakines.me" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>ngerakines.me</span></a></span> notes, <a href="https://bsky.app/profile/ngerakines.me/post/3lng3ppn4hs2w" rel="nofollow noopener noreferrer" target="_blank">Bluesky's approach is missing something critical: consent</a></p></li><li><p>as <span class="h-card" translate="no"><a href="https://fedified.com/@DataDrivenMD" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>DataDrivenMD</span></a></span> points out, <a href="https://bsky.app/profile/datadrivenmd.social/post/3lnenixyqu22b" rel="nofollow noopener noreferrer" target="_blank">the current framework functionally disenfranchises community organizers who lack social networks with access to mainstream media and other institutions that are designed to exclude marginalized people</a></p></li><li><p>just like on Twitter, he people initially verified are overwhelmingly cis, white, and male; </p></li><li><p>the three initial external verifiers include the anti-trans NYTimes and one of their subsidiaries</p></li><li><p>Bluesky hasn't said anything about their process for making decisions about who's "notable" enough for them to verify and how they decide somebody's "authentic".</p></li></ul><p>To be fair, I am seeing a bit of discussion of some of these issues here. But I'm not seeing anything about consent, or community moderation, or equity. Instead, the vast majority of what I'm seeing is people saying hat the approach of external verifiers (run by entities other than Bluesky) and the Bluesky app attaching privileged semantics to the annointed ones isn't "decentraized." </p><p>Is that really the important thing here? </p><p><a href="https://infosec.exchange/tags/bluesky" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>bluesky</span></a> <a href="https://infosec.exchange/tags/verification" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>verification</span></a> <a href="https://infosec.exchange/tags/fediverse" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fediverse</span></a></p>