FWIW, I just read this comment by the user, snarfed - in the matrix room, Federated Devs: https://matrix.to/#/#fediverse-devs:matrix.org
in practice I’m not sure how much it adds, since AP server admins still generally store and control users’ private keys, can sign with them, rotate them, etc this is one thing I like about Bluesky. it’s federated, but it has two levels of keys per user. servers have one level of private key, used for normal interactions. users have another layer that’s only used to switch servers, “undo” a malicious server’s recent activities with its user key, etc.
https://atproto.com/guides/overview#account-portability
The topic came up with-regards-to the complexity and poor interoperability of http signatures between fediverse instances.
Im a big fan of Webber and the team’s activities.