56
Can we make federation less dependent on domain names? (sh.itjust.works)
submitted 9 months ago by to c/fediverse@lemmy.world
19 comments fedilink hide all child comments
 

It looks like some issues may arise if/when an instance's domain name changes. Is there any way we can change federation so that we don't need to rely on such a central point of failure?

you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 9 months ago* (4 children)

I still don't understand how this is not akin to falsifying data. If we normalize servers copying data from other instances and just rewriting the URL, there is little in the way for malicious actors to create piefed instances to scam others pretending to be someone they are not.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 9 months ago* (3 children)

    Is Piefed implementing this in some weird way?

    Iirc previous work on this in the fediverse involved a very clear way of doing it that makes sure to address the issue you're bringing up there.

    The idea is that you send activities to announce the move and mark the original actor as having moved to the new actor (and the new actor as being the new home of the original actor). Instances then verify this by whether that actor relationship is specified correctly on both sides (does going new actor -> origin actor -> new actor lead back to where we started from?).

    Is that not also Piefed's implementation? Because if it is, I don't see your scenario being viable. Since the move needs to be acknowledged by both sides, it cannot just be faked.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 9 months ago* (last edited 9 months ago) (2 children)

    AFAIK, "community migration" is done in PieFed by having the target instance making a request to the source one to change, and if the owner authorizes it then it PieFed recreates the actor and its objects on the target instance. Then it is up to the owner of the source community to delete close the source community.

    My objection is to this recreation of the objects. If someone creates a post on "community@alpha" and the moderator decides to move to "community@beta", history is being recreated and it makes "beta" with activity that is not original. Also, having the consent from the community owner is not enough, because it ignores the fact that the members of the alpha community might not be interested in being associated with beta.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 3 points 9 months ago*

    Oh yeah, this does not sound okay.

    If user@delta creates a post on community@alpha, their post lives on delta, not alpha. Community@alpha should not be able to unilaterally decide that the post should instead live on beta. Delta needs to be the one to decide that.

    Sorry for the political analogy, but this sounds to me like Russia and the US deciding on Ukraine's future without involving the latter.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 9 months ago*

    I almost feel like someone needs to do a write-up of the 196@lemmy.blahaj.zone debacle - while not a 1-for-1 example (it wasn't a migration attempt that functioned the exact same way as it would with PieFed), it's a good case study for userbase-community owner-instance dynamics that should be considered, specifically the bit in your last sentence.

  • permalink
  • fedilink
  • source
  • parent