Mississippi’s age verification law has sparked a showdown over internet freedom, decentralization, and who actually has the power to switch off a social network.
HB 1126 requires social platforms to verify every user’s age before granting access. After the U.S. Supreme Court declined to pause the law while challenges play out, companies faced a stark choice: comply or face fines of up to $10,000 per user. Bluesky opted to block access in Mississippi, saying as a small team it couldn’t rapidly ship the sweeping technical changes the law demands and raised alarms about privacy and overreach.
The backlash was immediate. Mississippi users scrambled for workarounds, often turning to VPNs, while others pointed out that “decentralized” networks are supposed to be resilient to top-down control. That sentiment fueled a tense exchange between leaders in the fediverse and Bluesky’s orbit. Mastodon founder Eugen Rochko argued that true decentralization prevents any single entity from shutting off access for an entire state. Mike Masnick, a Bluesky board member, countered that this framing is incomplete: while users can host their own views of a decentralized network, large instances and operators could still be targeted by state enforcement, especially if they host Mississippi users. The law’s language is broad enough to potentially apply to a wide range of online spaces, from social feeds and chat rooms to message boards and video channels.
Under the hood, Mastodon and Bluesky take different paths to decentralization. Mastodon lives on the ActivityPub protocol and connects thousands of independently run servers (“instances”). Bluesky is built on the AT Protocol, which emphasizes account portability and modular infrastructure. Instead of everyone running an entire social network, AT Proto allows communities and developers to operate parts of the stack—personal data servers (PDS), relays, moderation lists, and algorithms. Because Bluesky is still young, most users rely on infrastructure run by the company behind the app, though community-run components are growing. Blacksky, for example, operates its own PDS; its founder, Rudy Fraser, has said his community does not plan to block users by location.
On the ground in Mississippi, users report that third-party Bluesky clients like Graysky, Skeets, Klearsky, TOKIMEKI, and Flashes, as well as forked apps such as Deer.social and Zeppelin, may still work for some. A sideloaded version of the Bluesky app has also circulated via alternative app stores. For read-only browsing, tools like Anartia’s search engine provide a window into the network without logging in. That said, none of these options is guaranteed; developers may not want to become de facto gateways for an entire state, and lawmakers could expand enforcement. Users should also consider the legal and privacy implications of any workaround.
The Mississippi fight underscores a larger tension. Decentralization can make enforcement harder because there’s no single corporate choke point, but many decentralized networks still rely on large, well-known instances or default infrastructure that can be pressured. Meanwhile, laws like HB 1126 often favor big, centralized platforms with the resources to build and maintain extensive age verification systems. Smaller services are left with unappealing choices: implement intrusive checks that clash with their values or pull out of entire jurisdictions.
Mississippi isn’t alone. Similar age assurance proposals are moving ahead in Arizona, Wyoming, South Dakota, and Virginia, where one bill would even cap time spent on social media. If these measures proliferate, the impact won’t just be technical. It will reshape who gets to speak online, which platforms can afford to operate, and how much personal data users must surrender to socialize on the internet.
For now, the dispute between Bluesky, Mastodon, and their communities shouldn’t obscure the core issue: sweeping age verification mandates risk chilling speech, undermining privacy, and consolidating power with the largest incumbents. The promise of decentralized social networking is that no single entity controls the conversation. Achieving that resilience—technically, legally, and socially—may prove just as much a political challenge as an engineering one.
