[cperciva]

I am very concerned about this being a target for malicious actors. I'd offer to help you with security but I've never even heard of some of your stack so I'm probably not in a position to help.

Is there anyone here who is familiar with OP's stack and has security experience?

[system2]

This is exactly what I thought about when I first read the post. This is not a good idea in my opinion.

[cperciva]

I disagree -- this is a good idea, because trans people need a community especially in times like this.

It just needs some attention paid to security.

[southernplaces7]

How is it a bad idea? A community for trans people that's actively used by them because it works for their needs should be considered a bad idea because certain assholes can attack it? The bad there is in the assholes and effort is due in stopping them, not the existence for a specific type of useful community itself.

[0xEF]

It's a bad idea when countries like mine are actively passing legislation toward banning trans people from existing. Having a hackable dox-ready list of where to find them and who they are would be quite convenient for any regime or its fervent supporters that have the resources and skill to weaponize such a service against them.

I get what you're saying, the assholes are the bad thing here...but they are also a clear and present danger that now has the power to do what they said they would do these people. This isn't just some malicious hate group from 4chan or whatever, these are government-backed actors interested in actually harming these individuals.

[squigz]

You're talking as if these threats are new to us. They're not. America is not the world, and treatment of trans people wasn't great in America prior to the current administration, either. I don't see a reason to disband our communities because the trans hate is slightly more front-and-center than it was a few years ago. They are needed now more than ever.

[nicbou]

This can work if the platform instills a culture of pseudonymity and takes privacy seriously. There exist platforms on the darkweb where far more sensitive data is exchanged.

I believe that you are fully right, but your concerns can be mitigated.

[saagarjha]

It's bad if the attack involves, say, doxing the users (who may not desire this or be in a place where it is safe fort this to happen).