Insights into the New Verification Process on Bluesky

Welcome to a new, quick episode of Richardson’s Rubicon podcast titled “Insights into the New Verification Process on Bluesky”. I’m your host, John Richardson. In this episode, we explore security protocols, identity verification, and user experience on social platforms.

We kick off with an analysis of different social media verification methods, with an emphasis on Bluesky’s unique approach. I dissect the transition from Twitter’s celebrity-focused paradigm to the pay-to-verify model of “X”. The issue of fake accounts is underlined, emphasising the weaknesses of existing models.

Attention now turns to Bluesky’s innovative “domain verification” process, a key feature of their groundbreaking AT protocol. I describe how it promises decentralisation, interoperability, and enhanced security, making your identity more transferable and giving a smoother experience on the internet.

https://atproto.com/guides/overview

This innovative verification method is illustrated through a compelling example featuring Sky reporter Sam Coates and a questionable account posing as Kemi Badenoch.

https://bsky.app/profile/samcoatessky.bsky.social/post/3lb6eyk6bp224

There’s no verification on this site, so it’s hard to be sure what you’re looking at. The Kemi Badenoch account on here is fake, her team tell me

— Sam Coates (@samcoatessky.bsky.social) 17 November 2024 at 21:46

I shed light on the intricacies of the verification process on Bluesky, how organisations can manage multiple users using subdomains, and how critical user-friendly instructions can be to a successful transition. The notion of domain name impersonation, also known as typosquatting – a potential threat with roots in the 90s internet era – is also discussed.

https://bsky.social/about/blog/4-28-2023-domain-handle-tutorial

The episode pushes on to emphasise the importance of user education and advises large organisations such as Sky News, BBC, the Houses of Parliament and others to publish Bluesky handles on their websites, reinforcing two layers of verification. With my experience in mind, I share insights into successful countermeasures such as proactive domain monitoring, legal protections, usage of Secure Socket Layer certificates and registering variations of company names.

https://news.sky.com/sky-news-profiles

I end the episode with an open invitation, urging listeners to actively participate in the podcast, bridging the gap between myself and you, the listener. The discussion can move beyond the IT realm, incorporating an array of topics chosen by you. Join me, not just as listeners, but as contributors, igniting stimulating conversations and expanding our collective understanding. So, continue to follow me on this informational journey while I blend humour, personal anecdote, and insightful commentary, all within an engaging narrative. Tune in and let us explore beyond the Rubicon together.

Follow me on Bluesky!

https://bsky.app/profile/richardsonsrubicon.com

About the Author
Retired information security and IT governance specialist, certified ITIL Expert. Now a podcaster, beekeeper, speculative fiction writer, and reluctant activist. Often found dissecting policy, interrogating imagined worlds, or being quietly disappointed by reality. Equal parts pragmatist and mischief-maker. Occasionally insightful, frequently an idiot, always curious.
Cookie Consent with Real Cookie Banner