oscilloscopes, cycling, snow, big cities, wiki. I like speculating about found objects.
protocol engineer @bsky.app (on 2026 summer sabbatical). formerly archive.org
elsewhere: bnewbold.net / @[email protected]
bryan newbold (⛱️ sabbatical mode)
Loading...
I'm the later case, the client could control whether PDS can see API bodies by doing oblivious HTTP or not (eg, for PDS-as-trusted-middleware) concept.
would let adverserial/proprietary apps bypass trusted-PDS traffic inspection; but they already cood via service tokens or BFF
💭 Oblivious HTTP is interesting!
the stated use cases are anonymous/stateless, and in atproto this could help with client privacy for identity lookups (eg, PLC resolution)
but seems like it could also help with pseudonymity? eg PLC op submissions.
and even PDS proxying (!)