@joshuap That's an interesting angle. I've seen lots of people complain about the complexity of managing accounts across the Fediverse.
Federated identity is supposed to make single sign-on easier. The lack of a personalized experience across instances violates some of the assumptions of single sign-on model.
@joshuap Granted, I'm not well versed in Mastodon's design paradigms, but it seems to me that OAuth-based access between instances would solve a lot of problems.
The obvious security flaw there is that when you allow Federated identities from a service (ie. FB social login), you're implying a trust relationship with the identity provider.
If anyone can create a Mastodon instance, the trust relationship is established by the user, but not necessarily by the other instance owners.
@joshuap Define “someone”.
I have accounts on two instances. I’m fine with people following both, so the profiles cross-reference each other. Otherwise nobody would know they are both mine. But it’d take some new infrastructure to put them into a single bucket, so to speak.
This of course would have to be voluntary!