It is a protocol where all messages are signed. There are relayers that may or may not store that information for you. The thing is that nobody can fake-post you unless they have access to your private key. You don't follow people's username, instead you do their public key. The protocol itself is much more advanced, but that is the foundation. Think of it like a bit torrent of content that you would generate, and people can subscribe to it.