1. the service itself should check if they want to register the user. obviously they cannot accept every registration from all network 2. signed PLC operation through PDS requires auth (even with email verification), so the service itself should create session with identity:* permission.

0

If you have a fediverse account, you can quote this note from your own instance. Search https://bsky.brid.gy/convert/ap/at://did:plc:xasnlahkri4ewmbuzly2rlc5/app.bsky.feed.post/3m6st4ow6vk2d on your instance and quote it. (Note that quoting is not supported in Mastodon.)