Same-as support

[christianbundy]

This sounds crazy but I swear it isn't.

What's the problem you want solved? Lots of people have lots of accounts and there isn't a clear way to link the accounts. On SSB this is usually called #same-as, and there's some deprecated code here that doesn't work, but the spec is there.

Is there a solution you'd like to recommend? If you're following someone publicly, maybe give two options: "unfollow" and "same-as" (TODO: better wording). If you select same-as, it publishes a message that says { following: true, blocking: false, sameAs: true }. The easiest win would be changing the Mentions page so that it adds mentions for all of your feeds instead of just the one you're on now. We could iteratively add features like:

• Same name between all feeds
• Same description between all feeds
• Profiles display messages from all feeds
• New private messages add all feeds as recipients (max 7 though, ouch)
• Eventually underlying modules (like SSB-Friends) so that following one feed has the same effect of following that feed + all feeds it's done same-as with.

Anyway, my thought is that it can be iterative, and that literally just changing Mentions will have a gigantic impact on the adoption of same-as by other clients. 🤷‍♂️

[cinnamon-bun]

Yeah! This is the start of a complex UX challenge but it's a good place to start. I have many thoughts!

Having to follow first before seeing the same-as button is unintuitive, could it always be there?

There are lots of relationship actions, maybe it makes sense to put some of them behind a dropdown. This could be one, since it will be rarely used.

We'd need a way to undo it also. Different-than. :)

same-as sounds like jargon - how about "Claim as my profile"?

Let's see, there are 4 cases. What should we show on a 3rd party profile page (not your current identity's profile)?

Neither I nor the profile I'm viewing have sent same-as

• [Claim as my profile]

I've not sent same-as, but the profile I'm viewing has

• [Claim as my profile]
• (Let's not show that the other identity is waiting for confirmation from you - this will freak people out if a random person tries to same-as them, when it's a harmless situation since it means nothing unless coming from both sides)

I've sent same-as, profile I'm viewing has not

• Claimed as my account, waiting for confirmation from the other side. [Unclaim]

Both have sent same-as

• This is you, on another device. [Unclaim]

Lastly, every profile (yours and others) should show a list of the other confirmed same-as accounts (or be a single merged profile page, but that's tricky)

[cinnamon-bun]

Let's call a cluster of same-as'd identities an "identity bundle" for lack of a better word.

I wish we could hide this whole situation from users so it just feels like a seamless single identity across devices, but I don't think we can plug the leaks in this abstraction. Instead of hiding it, I think it would be better to highlight the difference so users understand the concept.

Lots of challenges to solve!

Profiles and names

• What profile info to show when there are several different names in a bundle? Should we use a single name for all the identities, or show their separate names? Maybe we need a separate kind of profile page for bundles vs single identities
• There's nothing to use as a canonical ID for a bundle, e.g. for profile URLs, because bundles can be constantly changing / merging / splitting

Relationships

• Following, blocking - apply to all identities in the bundle, or just one? The bundle can change later - new devices; merging together with another bundle

Private messages

• When sending private messages to a bundle, if the recipient adds more devices to their bundle later they won't be able to read the old private messages from the new device.
• If bundles in a private message thread have changed, who do we use as the recipients for newly sent messages to that thread? Do we need to get user consent to change the recipients?
• Your outgoing private messages need to get cc'd to your own other devices so you can read them there. Same for any private-to-yourself messages like private following.
• Private message limit of 7 participants is not enough for two humans who could each have 4 device identities

[cinnamon-bun]

Right about now I'm wishing same-as worked by using a single shared keypair among all devices. Then we could use the keypair as a stable ID for the bundle.

[cinnamon-bun]

Anyway I'm thinking too far ahead! Yes to this:

• Same-as buttons on profile
• Include your other identities in Mentions and Participating

[cinnamon-bun]

Discussion: using the upcoming private-groups for sameAs purposes

http://localhost:3000/thread/%25Rmmkx2uuqYyxh%2BhNljaNsZrMKoItIdiUXslzTBmZSvg%3D.sha256#%25Rmmkx2uuqYyxh%2BhNljaNsZrMKoItIdiUXslzTBmZSvg%3D.sha256

[casutherland]

It could be of interest to review how keybase provides a fluid #same-as user experience, by composing the user's identity graph (linking to hellobot's as Chris's graph is not rendering) from the user's device identities and the device sigchain.

Reconstructing this graph is what the Keybase app does, using chris's chain. It also checks each of the social proofs: the tweets, gists, etc., to make sure the edges are truly bidirectional.

Aside: as was mentioned previously elsewhere, SSB could potentially provide a social proof endpoint, in addition to consider a similar proofing and sigchain mechanism to implement #same-as.

[tunnckoCore]

@qcu, just was thinking about the same thing.

Meanwhile I found there's ssb-identities which seems like such thing, reasons not using it?