Last year, I wrote this and it didn't really get a lot of interest or traction so I'm sharing it again:

This is how Bluesky could implement "limited audiences" (a.k.a. private accounts) without changing their architecture. Instead, it uses state-of-the-art cryptography

https://soatok.blog/2024/11/29/imagining-private-airspaces-for-bluesky/