decentralized-id.github.io/unsorted/later/dweb.md

5.6 KiB
Raw Permalink Blame History

title published
The Decentralized Web and Digital Identity false

General

Technique

  • Signing HTTP Messages 2021-05-05 Justin Richer

    A recent move towards consistency has been the adoption of Structured Field Values for HTTP. In short, structured fields allow HTTP headers to house simple, non-recursive data structures with unambiguous parsing and deterministic serialization. These aspects made it perfect for use within the HTTP message signatures specification.

Application

Solid - Inrupt

  • TBL: Out to Remake the Digital World. 2021-01-10

    A story appeared in the NY Times about Tim Berners-Lees vision for the web and Solid-Inrupt that are working towards fulfilling it. The article included a quote from Kaliya, and has stirred up an active thread on the CCG mailing list.

    Others say the Solid-Inrupt technology is only part of the answer. “There is lots of work outside Tim Berners-Lees project that will be vital to the vision,” said Kaliya Young, co-chair of the Internet Identity Workshop, whose members focus on digital identity.

    Mr. Berners-Lee said that his team was not inventing its own identity system, and that anything that worked could plug into its technology.

  • Byline: Tim Berners-Lee wants to put people in control of their personal data.: Michael Herman

    He has technology and a start-up pursuing that goal. Can he succeed?

    • Has anyone else looked at this article?
    • Anyone familiar with TBLs view of Decentralized Identity?
    • Is there anyone from the Solid project or Inrupt a member of CCG?
    • A solid discussion is underway, including this from Kayode Ezike when I developed solid-vc, I was operating mostly under the threat model of compromised cryptographic keys used to sign credentials via jsonld-signatures and a compromised Solid password.*

    I don't want to bombard you all with too much information about this project in this thread, but for now I will share the solid-vc repo again as well as my RWoT9 submission.

  • Credentials and HTTP-Sig authentication for Solid 2021-02 Henry Story

    Here is an extended version of the HTTP-Signature document I put together today, bringing in ideas that have emerged thinking about this over the past 3 months

IndieAuth

  • Simon Wilson writes about using IndieAuth with Datasette 2020-11-18

    IndieAuth is a spiritual successor to OpenID, developed and maintained by the IndieWeb community and based on OAuth 2. This weekend I attended IndieWebCamp East Coast and was inspired to try my hand at an imPplementation. datasette-indieauth is the result, a new plugin which enables IndieAuth logins to a Datasette instance.

  • How to Sign Users In with IndieAuth 2021-04-13 Aaron Parecki

    IndieAuth is an extension of OAuth 2.0 that enables an individual website like someone's WordPress, Gitea or OwnCast instance to become its own identity provider. This means you can use your own website to sign in to other websites that support IndieAuth.

  • IndieAuth Spec Updates 2020 by Aaron Parecki 2020-12-03 Aaron Parecki

    This year, the IndieWeb community has been making progress on iterating and evolving the IndieAuth protocol. IndieAuth is an extension of OAuth 2.0 that enables it to work with personal websites and in a decentralized environment.