Christopher Allen

@ChristopherA

6 days until the #RWOT9 design workshop in Prague. Of 50+ advance reading and topic papers https://github.com/WebOfTrustInfo/rwot9-prague/tree/master/topics-and-advance-readings I've read almost half, and expect to be half-way done today. Here are my summaries of the next 5.

8/27/2019, 12:06:34 PM

Favs: 10

Retweets: 3

Christopher Allen

@ChristopherA

TOPIC DID Resolution collected diagrams KEY CONCEPT The DID Resolver task force has been puzzling through how to handle different DID methods at the same time, as well as address how to implement some of the capabilities possible with DID dereferencing. https://github.com/WebOfTrustInfo/rwot9-prague/blob/master/topics-and-advance-readings/did-resolution-collected-diagrams.md

8/27/2019, 12:12:32 PM

Favs: 2

Retweets: 1

Christopher Allen

@ChristopherA

…As someone who often presents about the DID architecture, this collection of explanatory images is quite useful. In particular, the subtleties of DID matrix parameters, dereferencing vs. resolving, etc. has been always been difficult. This paper offers the best explanation yet

8/27/2019, 12:17:10 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

TOPIC did🐌 A DID Method for the Real World KEY CONCEPT "This DID Method specification started out as satire, but it occurred to us that exercises in mapping DID related concepts to offline or non-technical scenarios might actually be a useful educational tool."

8/27/2019, 12:19:24 PM

Favs: 1

Retweets: 1

Christopher Allen

@ChristopherA

…"Prerequisites: This DID method assumes you already have a place to live. If you don't, please consult wikipedia or legal counsel regarding your local regulations about purchasing, renting or squatting land and buildings and get somewhere to live before proceeding."

8/27/2019, 12:20:30 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"Generating the identifier: The snail identifier portion is generated from your IRL address. To generate, perform the following steps: Write down the details of where you live, starting from the most general to the most specific…"

8/27/2019, 12:21:52 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"…You SHOULD also include any country- or region-specific codes, such as postal or zip codes. The last line SHOULD be your name. 2. Replace spaces with the + character. 3. Replace line breaks with a _ character. 3. Append this string to did:snail:"

8/27/2019, 12:22:57 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"Deactivate: You may wish to deactive your DID if you abandon society to live in the woods, are the victim of structural inequality which renders you homeless, or shuffle off this mortal coil…Take your paper DID Document in two hands. …Tear the DID Document into tiny pieces"

8/27/2019, 12:24:47 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…When I first read this it made me laugh, but though it is silly and has some insider jokes, it has some real value in its metaphors and analogies that are helpful people outside the identity space understand DIDs and related technologies.

8/27/2019, 12:26:31 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

TOPIC KEY Ecosystem Bootstrapping Via Notary VCs CONCEPT This paper observes that in current existing document collection and notarization processes there may be some value that DID/VCs can offer the notaries. This might ease bootstrapping into full DIDs. https://github.com/WebOfTrustInfo/rwot9-prague/blob/master/topics-and-advance-readings/ecosystem-bootstrapping-via-notary-vcs.md

8/27/2019, 12:31:52 PM

Favs: 2

Retweets: 1

Christopher Allen

@ChristopherA

…"The goal is to improve the footprint of…SSI technologies through verifiable credentials issued without the expectation that the subject maintains a wallet, controls a DID, or manages private-keys, and where the issuer of the credential is not the originator of the data."

8/27/2019, 12:33:26 PM

Favs: 3

Retweets: 0

Christopher Allen

@ChristopherA

…"The danger of not paying attention…is that the first-order trust in legislative compliance tools will go first to another style of technology, such as state-sanctioned credentials issued and managed fully by our glorious leaders and our benevolent corporate overlords."

8/27/2019, 12:34:53 PM

Favs: 2

Retweets: 0

Christopher Allen

@ChristopherA

…"Can we use SSI-like technology to get to a half-way point that begins to integrate WoT processes and existing document-vetting without requiring that a mature ecosystem emerge fully formed before it is first useful? I believe the answer is yes."

8/27/2019, 12:35:40 PM

Favs: 2

Retweets: 0

Christopher Allen

@ChristopherA

…"save a PDF of the receipt with a QR code that points to some digitally signed asset or credential with the option of downloading the digital asset. Cost remains…(low). Most importantly there is no lifelong commitment to guarding private keys, and no training required."

8/27/2019, 12:37:41 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"The key to this is the "discretion of the officer" and providing SSI and WoT technologies that enable such officials to arrive at the same decisions they would make today, but to arrive at them faster and with more safety and strong defensive auditability than before."

8/27/2019, 12:38:25 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"Focus on the notary changes the nature of the credential which is issued. The credential is no longer a direct, first-class claim by an issuer about a subject - it is a claim of observation, by a registered professional, of a document issued to a subject."

8/27/2019, 12:39:35 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

{{ It was just pointed out to me that I didn't give the URL for the DID:Snail method satire that I described. It is at https://github.com/WebOfTrustInfo/rwot9-prague/blob/master/topics-and-advance-readings/didm-snail.md }}

8/27/2019, 12:43:05 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

TOPIC Formal protocol verification for SSI KEY CONCEPT The process of proving code and protocols has been emerging out from academia into the real world. This paper proposes we should do begin this formal verification process for DIDs and SSI designs. https://github.com/WebOfTrustInfo/rwot9-prague/blob/master/topics-and-advance-readings/formal_verification_for_ssi.md

8/27/2019, 12:46:57 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"Even when best practices are followed during design and specification of such systems, security problems can still occur through unforeseen interactions. Simple protocols have been believed secure for a long time and found insecure only after tool-assisted formal analysis."

8/27/2019, 12:48:00 PM

Favs: 1

Retweets: 0

Christopher Allen

@ChristopherA

…"formal analysis has often been applied to already established standards and protocols; it has only recently been incorporated more into design processes, e.g., for TLS 1.3. Similarly, there is a great opportunity to incorporate formal verification into the SSI design process."

8/27/2019, 12:50:20 PM

Favs: 2

Retweets: 0

Christopher Allen

@ChristopherA

…"As a first step, we provide models of increasing complexity for DIDComm, agent-to-agent communication using peer DIDs" The topic paper then points to a longer formal proof at https://github.com/SvenHammann90/SSI/blob/master/RWOT_9/Topic_Paper_RWOT.md

8/27/2019, 12:51:50 PM

Favs: 1

Retweets: 0