Identity in the Fediverse
Identity in the Fediverse
I (like many people) have been paying more and more attention to distributed social networks over the past several weeks. For the uninitiated, these networks (hereafter referred to as “the Fediverse”) are individual instances running software which communicate with each other over standard protocols...
I'm new to fediverse. For a long time I assumed it would be possible to have a single identity separate from the ActivityPub instance I'm using and tried to figure out what am I missing. Recently, I figured out that it was not the case. People generally have multiple accounts for interacting with different aspects of fediverse. It still bothers me a bit. So I did a search and found this note from 2018 that summarizes my thoughts very well.
I'm wondering if there are others thinking about this, or having multiple accounts has been accepted as the "correct" way of interacting with fediverse?
I think separating identity from the instances would really be a step forward, but as I said, I'm new to this and maybe there are things I don't understand?
having multiple accounts has been accepted as the “correct” way of interacting with fediverse?
No. You are right that there should be a better separation between your identity and the servers that you use to connect/interact with the fediverse. It just so happens that the existing solutions have been "good enough" for the majority of people, and there are many other issues (content discovery, reputation, server scalability...) that seem to be more pressing than that.
However, there are some other projects which are on the way to make it possible for people to use one server but have their identity separate. Mitra uses Ethereum wallets as a way to login to the server, while Takahe keeps separate domains for the server and the user's actor ids, which would let you, e.g, sign up with your own id to any server. This would essentially turn ActivityPub servers into a commodified provider, and people could migrate between servers transparently.
Thanks for the explanation and the links. It's good to hear that there are people working towards this goal.
Mhm, you could just add a link to your homepage to your bio which could help associate your various accounts to yourself.
Myself I had used several accounts to access several instances on mastodon, but soon after I realised that I could just follow tags and users across instances anyway, so why keep them alive.
Having several instances of Mastodon is probably not that big of an issue. I would expect one of them to win over time. But it's not straight forward to use a Mastodon account when interacting with lemmy, PeerTube, PixelFed, etc. If I could get the identity (my handle) from a single place (like some neutral non-profit) and could use it on everything, that would be better. But I guess that's not happening any time soon.
Yeah, I was endlessly confused that I couldn't use my social.technics.de account to login anywhere but Mastodon, as I'm pretty sure I had been promised. I suppose I eventually just accepted that I'd misunderstood some aspect of the concept but it did slow down my switch to the Fediverse considerably.
I was super confused by that too.
It's worth noting, however, you're often able to post the link to a post on another Fediverse platform into the search bar of a Mastodon instance and interact with it from there. I was able to do that for a Pixelfed post.
I'm in the same boat. Would be good to have the ability to have a single identity that works across the fediverse. As a first step if you have your own domain anyway, it'd be cool to alias that to different underlying Mastodon/Kbin/Pixelfed/etc. accounts. It's possible to some small extend using the "Webfinger" protocol: https://philna.sh/blog/2022/11/23/alias-your-mastodon-username-to-your-own-domain-with-jekyll/
I think being able to migrate your identity from one instance to another is a core requirement to fulfilling the promises of federation. The idea is to be able to freely leave a bad instance, but all you can do now is completely start over on a new instance, losing all your posts and followers. That's way worse, and not how it should be imo. No big instance has gone rogue yet afaik, but as soon as one does this will be a major issue!
To really accomplish that we would have to create a mechanism for a user to own their own identity, e.g. in form of some sort of secret key file. This would introduce a huge number of usability issues though! Handling key files is really hard, so that's probably not an option in the near future.
What we definitely should add is some sort of instance single-sign-on, so you can log into another instance by having your original instance authorize the login attempt. This should then allow the new instance to use your original account (for subs and posts), and also migrate that account to the new instance (update handle on all your posts, migrate your followers, ...). This would be a bit worse than owning your identity, because your original instance could just refuse to authorize any SSO attempts, but it would still be a big improvement imo.
Maybe we can also just combine the two, so instance SSO and being able to download an identity key as backup.
Idk how I feel about easily migrating accounts from one instance to another or even having my password pass between instances on activypub. If it's easy to migrate an account then it would be possible for an admin of a rogue instance or even just a rogue admin of a perfectly fine instance to take your account. One thing I learned since joining is these accounts are kind of disposable. Personally I only have 2 on 2 different instances one of which is lemmy.world which is/has grown a whole bunch in the last few weeks. Personally idk how that kind of growth is sustainable on this kind of platform and I'm not shocked they are running into issues. When an instance explodes the way lemmy.world has they need to make an extreme investment into the server side of the instance to keep things running smoothly and that doesn't stay cheap or easy for very long.
If it's easy to migrate an account then it would be possible for an admin of a rogue instance or even just a rogue admin of a perfectly fine instance to take your account.
This is the case right now. Admins of your instance have full control over your account. They can remove it or lock you out at any point if they want to.
If you have ever been cyber stalked, you may prefer to have anon avatars, names etc. Having been stalked I prefer to have the option.
Most of us are pretty innocuous but trolls, scam bots, agenda pusher, junk sellers, etc are not something I want …
Be safe.
Maybe I wasn't clear enough in my wording. I didn't mean to say everybody shoukd/must have a single account. And separating identity from content doesn't necessarily enforce it. Think about crypto wallets. They provide some sort of an identity, but anybody can have an infinite number of them. Now, I'm not saying crypto wallets should replace fediverse identities. I don't even have one. But, I could log into all fediverse instances with a single account, that would make things much easier for everybody:
- New comers would just get an identity without stressing over which instance to pick for a handle
- People who care about their privacy would just create as many identities as they like
- People who want the convenience of having a single account would get it
- Those who want a different account for each of their interests (gardening, music, politics) could still do that easily
Nothing prevents someone from following you on your instance. Knowing the sum of your interests gives me more information than the sum.
So, to avoid having your profile being made and exploited, you could split account by interests.
As an example: Someone interested in videogaming and driving Ferraris has a lemmy account he uses to posts on both subjects. Some mar*keting bot wil report "This guy certainly has a high budget for his videogames. Let's sell him expensive racing games with exclusive Ferrari logos & goodies". If that person had one account for video games and another one for ferraris, he'd be protected from that.
But yes, everybody should feel free to use a single wide use account.