Hacker News Reader

e.g. that's why famous nft artists either have their ENS name in their Twitter bio or as their name. With that, you know that e.g. if shaq.eth minted an NFT, it's indeed the real shaq o'neal as otherwise the imposter shaq.eth registrar would have had to have the access to the real shaq o'neal's Twitter account.

View on HN

Doesn't that make Twitter the central authority providing the trust framework required for it to work?

no because similar to PGP keys it really doesn't matter where you publish your fingerprint or how you connect your identities. If shaq had a popular website, he could do it there too. E.g. I have my PGP fingerprint on my website: https://timdaub.github.io

In other words, your trust is anchored by Twitter or GitHub. I have to gauge that the key I got was uploaded by you rather than someone else and the thing building that trust is by linking it to an identity established on those services.

PGP had the same problem: the web of trust didn’t scale well outside of existing communities – and where people signed keys for strangers, they also relied on trusted third parties (driver’s license, student ID, etc.) to establish that.

Reply on news.ycombinator.com