HN Debrief

Building on ATProto

  • Social Media
  • Protocols
  • Open Source
  • Privacy
  • Developer Tools

The post is a builder’s critique of ATProto from outside the core microblogging use case. It likes the idea of user-owned data and composable apps, but argues the current design starts from “everything public” and then bolts on privacy in a way that feels unnatural. The sharpest complaint is the proposed permissioned-data model, which ties access control to where data lives and makes private records look structurally different from normal app data. The author also wants more local-first behavior, where apps can work offline and sync later, instead of assuming a user’s personal data server is always the center of truth.

If you are evaluating ATProto for a product, treat it as a strong fit for public social graphs and portable user data, not as a general-purpose substrate for private collaboration. Watch the permissioned-data work closely, but do not assume it will erase the protocol’s public-first design tradeoffs.

Discussion mood

Mostly interested but skeptical. People like the ambition, the openness of the ATProto team, and the user-data portability story, but they think the protocol is being stretched beyond its public-social roots and that privacy and local-first support still look bolted on and awkward.

Key insights

  1. 01

    Local-first was cut for v1

    A core Bluesky contributor confirmed this was a conscious design trade. The team wanted local-first behavior but dropped it to keep the first version manageable, which means the limitation is structural rather than a missing feature toggle. The suggested path today is to pair ATProto with tools like Iroh for local sync, then publish committed state back into the protocol later.

    Do not plan around native offline-first semantics in ATProto today. If local sync is core to your product, budget for a second system and treat ATProto as an identity and publication layer.

      Attribution:
    • pfraze #1
  2. 02

    Games show the upside of public records

    The board-game example made the strongest pro-ATProto case in the conversation. By broadcasting game state and replays as protocol-native records, the app can be extended by outside tools for analysis, replay viewing, and AI assistance without the original developer designing a bespoke API. That only works cleanly because the data is shared and legible across apps.

    If your product gains value when third parties can inspect and build on user activity, ATProto gives you leverage. Design your schema so outside developers can do useful work with it from day one.

      Attribution:
    • MarceColl #1 #2
    • jauntywundrkind #1
  3. 03

    Permissioned data is about selective sharing

    The more credible defense of the new privacy work was narrow and concrete. It is aimed at cases like invite-only events, clubs, forums, bookmarks, and community spaces where data should be visible to a defined audience, not encrypted end to end or hidden from the user’s own storage. That framing makes the proposal easier to understand, but it also narrows the claim: this is access control for semi-private social data, not a universal private-data layer.

    Map your use case precisely before betting on permissioned data. It may fit audience-scoped social features, but it will not automatically cover confidential collaboration or messaging needs.

      Attribution:
    • billdybas #1
    • jakelazaroff #1
    • verdverm #1
  4. 04

    Protocol success needs a business wedge

    The Matrix comparison added a useful market lesson. Matrix built broad infrastructure first and only later found a sustainable wedge in government and enterprise, while Bluesky got to focus on a mainstream consumer use case from the start. The point is not that one protocol is better. It is that open protocols do not spread just because they are well designed. They need a product and revenue path that keeps the work alive.

    When you evaluate protocol bets, look past architecture and ask what business wedge will fund adoption. A technically sound protocol without a durable market path can stay niche for years.

      Attribution:
    • Arathorn #1

Against the grain

  1. 01

    Small social may not need new protocols

    The push for private, community-scale apps got challenged on simpler grounds. For group chats, communities, and friend networks, there is already plenty of protocol prior art including ActivityPub, Matrix, IRCv3, XMPP, email, and plain bespoke web backends. The bottleneck looks more like user experience than missing infrastructure. That undercuts the idea that ATProto needs to become the substrate for every kind of social software.

    If you are building for small groups, compare ATProto against boring existing stacks before buying into protocol novelty. Your differentiation may come from product design, not from a new federation model.

      Attribution:
    • Karrot_Kream #1 #2
  2. 02

    Open protocol claims still hinge on Bluesky

    Some readers were not convinced by the decentralization story because the protocol still feels institutionally tied to Bluesky. The criticism was less about the spec being closed and more about governance, implementation gravity, and whether separation from the company will happen fast enough to earn trust. Replies pointed to working-group and PLC directory steps, but the suspicion remained that openness on paper is not the same as independence in practice.

    If governance risk matters to your company, assess who actually controls the roadmap, reference infrastructure, and migration path. Treat formal openness and practical independence as separate questions.

      Attribution:
    • Striving7340 #1
    • polymer8563 #1
    • steveklabnik #1

In plain english

ActivityPub
A decentralized social networking protocol used by many Fediverse services such as Mastodon.
AI
Artificial intelligence, here mainly referring to software systems and crawlers associated with large language models.
API
Application Programming Interface, a way for software to access a service or model over the network under the provider's control.
ATProto
Authenticated Transfer Protocol, the decentralized social networking protocol created for Bluesky that aims to let users keep identity and data portable across apps and services.
IRCv3
Internet Relay Chat version 3, a modernized set of extensions for the long-running IRC chat protocol.
Iroh
A peer-to-peer networking and sync tool mentioned as a way to add local or direct device synchronization alongside ATProto.
local-first
A software design approach where apps work primarily from local data on the user’s device and sync later, instead of depending on a server as the immediate source of truth.
Matrix
An open protocol for decentralized real-time messaging and collaboration.
PLC directory
A directory service used in ATProto for resolving certain decentralized identifiers and their current metadata.
XMPP
Extensible Messaging and Presence Protocol, an open standard for messaging and presence.

Reference links

ATProto proposals and working groups

Examples of apps and use cases

Related communities and tooling

Talks and broader protocol context