ecosistema-social-decentral.../topics/identity.md

79 lines
2.3 KiB
Markdown
Raw Normal View History

2020-06-11 06:38:33 +02:00
# Identity
2020-06-16 22:45:41 +02:00
Centralized identities are tied to a single service. Decentralized identity is not.
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
We will call entities with identities "actors", because non-human entities such as companies, organizations, and bots may have identities on a social network.
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
Identity allows an actor to:
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
- control an account and access private data
- communicate with another actor
- establish visible reputation and credibility
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
Desirable qualities for decentralized identities:
2020-06-11 06:38:33 +02:00
2020-06-16 22:45:41 +02:00
- Allow authentication and migration between services
- Allow communication across services
2020-06-16 22:18:25 +02:00
- Unique, global, and memorable
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
## Decentralized Identity
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
OAuth is currently the most successful identity standard. OAuth was created to securely transfer user credentials from one site to another. OAuth identity providers became centralized because users could not run or choose their own identity providers.
2020-06-11 06:38:33 +02:00
2020-06-16 22:45:41 +02:00
### Identity in federated applications:
2020-06-11 06:38:33 +02:00
2020-06-16 22:18:25 +02:00
- email
- XMPP
2020-06-16 22:45:41 +02:00
- Matrix
2020-06-16 22:18:25 +02:00
- Diaspora: User identities in Diaspora are tied to their pod, and cannot be migrated. Diaspora uses the Webfinger protocol to discover users from other pods. User information is returned via hCard, an open microformat standard for identity.
2020-06-16 22:45:41 +02:00
- Mastodon:
- Solid
2020-06-11 06:38:33 +02:00
2020-06-16 22:45:41 +02:00
### Identity in p2p applications:
2020-06-16 22:18:25 +02:00
P2p systems key management, key verification, key backup. Account recovery.
2020-06-16 22:45:41 +02:00
- IPFS
- Peergos
- Hypercore
- Gun
- Ssb
- Aether
- Iris
2020-06-16 22:18:25 +02:00
### Blockchain identity
2020-06-16 22:45:41 +02:00
- Namecoin
- Handshake
Lots of them.
Microsoft
IBM
2020-06-16 22:18:25 +02:00
### Decentralized Identifiers (DIDs)
[DIDs](https://w3c-ccg.github.io/did-primer/) are a new type of globally unique identifier that do not require a centralized registration authority, and can serve as a decentralized public key infrastructure. DIDs are a [W3C standard](https://www.w3.org/TR/did-core/).
The format of a DID is: a scheme identifier, followed by the DID method, followed by a method-specific identifier. A simple example: `did:example:123456789abcdefghi`
2020-06-11 06:38:33 +02:00
2020-06-16 22:45:41 +02:00
## Reputation & Trust
Web-of-trust
P2p network can ban, but cannot take away identity
2020-06-11 06:38:33 +02:00
## Social graph proof
2020-06-16 22:18:25 +02:00
- Handshake problem and collusion protection (see IRIS)
## Fail cases
2020-06-11 06:38:33 +02:00
2020-06-16 22:45:41 +02:00
Account recovery.
Sybils and spam
Impersonation
2020-06-11 06:38:33 +02:00
## Links
2020-06-16 22:18:25 +02:00
- [What are Decentralized Identifiers](https://www.evernym.com/blog/what-are-decentralized-identifiers-dids/)
- [Decentralizing the Social Web](https://hal.inria.fr/hal-01966561/document)