ATProto's Key Architecture Gives PDS Operators Full Control Over User Identity and Impersonation Capabilities

This article critically examines ATProto (the protocol behind Bluesky) and reveals that Personal Data Server (PDS) operators hold users' signing and rotation keys, giving them full control to impersonate users across the entire ecosystem. The author argues this centralization ris