(moved) boots‮🌸🌿‭Apr 4, 2017

okay look
#mastodev, there needs to be a brainstorm on something:
a lot of users are concerned about cross-instance users using their username and impersonating them

what would be a good and userfriendly way to fix this?
gnu social doesn't even have a fix for this yet, it seems, so...

Show threadHedgeMageApr 4, 2017

@b Could someone please make an effort to explain to me the source of the concern? I have a couple of theories, but I want to start with the whole of the problem in my head.

Start with: how is this different from caring whether someone has a similar email address to yours, but at a different domain?

Show thread(moved) boots‮🌸🌿‭Apr 4, 2017
@HedgeMage because it's more public and there isn't exactly a great way of saying "this is me"
imagine if say like email worked like this:
bob wants to find alice, so bob emails alice@ every email domain until he finds alice. what happens when, say, jane registers alice@ and says they're alice?
Show threadmalokiApr 4, 2017
@b @HedgeMage Can't this just be solved with hi I'm [@maloki]
Show threadHedgeMageApr 4, 2017

@maloki There's some concern over the ability to mix up similarly-named accounts in limited (e.g. mobile) interfaces, and/or what happens when non-technical users go about trying to find other non-technical users (who may not have enough of a well-developed web presence to quickly turn up the right account, especially if a malicious impostor exists).

I'm thinking on it.

Show threadTim Pastoor ✅Apr 4, 2017

@HedgeMage @maloki Working on it. Prepare for content overflow.

https://maly.io/web/statuses/38333

Show threadHedgeMage
@tim @maloki Ready and waiting.
Apr 4, 2017 at 11:37pmWeb