Update ssi-principles-vs-characteristics.md

This commit is contained in:
infominer33 2018-12-17 22:11:48 -05:00 committed by GitHub
parent 2f5f9b9539
commit b27922e770

View File

@ -71,11 +71,11 @@ These principles could be more closely examined against the sub-points of the *A
>8. **Consent.** *Users must agree to the use of their identity.* Any identity system is built around sharing that identity and its claims, and an interoperable system increases the amount of sharing that occurs. However, sharing of data must only occur with the consent of the user. Though other users such as an employer, a credit bureau, or a friend might present claims, the user must still offer consent for them to become valid. Note that this consent might not be interactive, but it must still be deliberate and well-understood.
>9. **Minimalization.** *Disclosure of claims must be minimized.* When data is disclosed, that disclosure should involve the minimum amount of data necessary to accomplish the task at hand. For example, if only a minimum age is called for, then the exact age should not be disclosed, and if only an age is requested, then the more precise date of birth should not be disclosed. This principle can be supported with selective disclosure, range proofs, and other zero-knowledge techniques, but non-correlatibility is still a very hard (perhaps impossible) task; the best we can do is to use minimalization to support privacy as best as possible.
I think these two principles are well represented by the Characteristics.
I think these two principles are well represented by the *Control* characteristic.
>10. **Protection.** *The rights of users must be protected.* When there is a conflict between the needs of the identity network and the rights of individual users, then the network should err on the side of preserving the freedoms and rights of the individuals over the needs of the network. To ensure this, identity authentication must occur through independent algorithms that are censorship-resistant and force-resilient and that are run in a decentralized manner.
This is an important principle and should be considered more closely where it best fits.
This is an important principle that I don't think is represented in the Characteristics.
### Conclusion