@silverpill @mbajur @snarfed.org For now webfinger is the place of authority for basically everyone, so it should support domain-only users.I’m a bit skeptical about distributing authority between DNS and webfinger tbh, it’s yet another implementation surface and potential attack vector based on diffused responsibillity (what if webfinger and DNS are out of sync and a client only does webfinger? etc)