5 ms·

pity it's blockchain based

kenforthewin 8y ago
It's unclear to me why you would want a distributed PKI to authenticate a centralized app. Or maybe it's only for dapps?
- westurner 8y ago
  In no particular order, there are a number of blockchain PKI (and DNS (!)) proposals and proofs of concept. "CertLedger: A New PKI Model with Certificate Transparency Based on Blockchain" (2018) https://arxiv.org/pdf/1806.03914 https://arxiv.org/pdf/1806.03914 https://scholar.google.com/scholar?q=related:LF9PMeqNOLsJ:scholar.google.com/&scioq=&hl=en&as_sdt=0,43&scilib=1 https://scholar.google.com/scholar?q=related:LF9PMeqNOLsJ:sc... "TABLE 1: Security comparison of Log Based Approaches to Certificate Management" (p.12) lists a number of criteria for blockchain-based PKI implementations: - Resilient to split-world/MITM attack - Provides revocation transparency - Eliminates client certificate validation process - Eliminates trusted key management - Preserves client privacy - Require external auditing - Monitoring promptness ... These papers also clarify why a highly-replicated decentralized trustless datastore — such as a blockchain — is advantageous for PKI. WoT is not mentioned. "Blockchain-based Certificate Transparency and Revocation Transparency" (2018) https://fc18.ifca.ai/bitcoin/papers/bitcoin18-final29.pdf https://fc18.ifca.ai/bitcoin/papers/bitcoin18-final29.pdf https://scholar.google.com/scholar?q=related:oEsKmJvdn-MJ:scholar.google.com/&scioq=&hl=en&as_sdt=0,43&scilib=1 https://scholar.google.com/scholar?q=related:oEsKmJvdn-MJ:sc... Who can update and revoke which records in a permissioned blockchain (or a plain old database, for that matter)? Letsencrypt has a model for proving domain control with ACME; which AFAIU depends upon DNS, too.
- fedotovcorp 8y ago
  It is necessary to consider in the framework of a specific case, but REMME WebAuth is just an example of how to use dPKI with a centralized application. Here you can see the demo: https://webauth-testnet.remme.io/register https://webauth-testnet.remme.io/register
StreamBright 8y ago
You mean, just to have it painfully slow, use obscene amount of energy and be vulnerable of 50%+ attacks? Yeah it is great. Not. :)
- r32a_ 8y ago
  Blockchain doesn't have to use PoW, which uses a lot of energy
  - fedotovcorp 8y ago
    Current blockchain uses Proof-of-Service algorithm that doesn't need a lot of energy but based on stakes and reputation. Here it is the detailed article about it https://medium.com/remme/proof-of-service-consensus-algorithm-overview-57c359290207 https://medium.com/remme/proof-of-service-consensus-algorith...
- gjs278 8y ago
  >painfully slow you can send coins securely with Ark in less than 8 seconds >use obscene amount of energy not in Ark, or any other DPOS >be vulnerable of 50%+ attacks what is merged mining, DPOS, renewable energy? the world may never know.
  - StreamBright 8y ago
    Sorry I am not up to date with 2019 bullshit bingo, these mean nothing: Ark, DPOS, merged mining
    - gjs278 8y ago
      ark is a coin. dpos is an alternative to proof of work. you get paid by holding the coin. merged mining is from 2012, it’s when two coins use the same algorithm so you can mine both at the same time, securing both chains
- hnbroseph 8y ago
  perhaps you're referring to implementation details of bitcoin?

It's unclear to me why you would want a distributed PKI to authenticate a centralized app. Or maybe it's only for dapps?

westurner 8y ago
In no particular order, there are a number of blockchain PKI (and DNS (!)) proposals and proofs of concept. "CertLedger: A New PKI Model with Certificate Transparency Based on Blockchain" (2018) https://arxiv.org/pdf/1806.03914 https://arxiv.org/pdf/1806.03914 https://scholar.google.com/scholar?q=related:LF9PMeqNOLsJ:scholar.google.com/&scioq=&hl=en&as_sdt=0,43&scilib=1 https://scholar.google.com/scholar?q=related:LF9PMeqNOLsJ:sc... "TABLE 1: Security comparison of Log Based Approaches to Certificate Management" (p.12) lists a number of criteria for blockchain-based PKI implementations: - Resilient to split-world/MITM attack - Provides revocation transparency - Eliminates client certificate validation process - Eliminates trusted key management - Preserves client privacy - Require external auditing - Monitoring promptness ... These papers also clarify why a highly-replicated decentralized trustless datastore — such as a blockchain — is advantageous for PKI. WoT is not mentioned. "Blockchain-based Certificate Transparency and Revocation Transparency" (2018) https://fc18.ifca.ai/bitcoin/papers/bitcoin18-final29.pdf https://fc18.ifca.ai/bitcoin/papers/bitcoin18-final29.pdf https://scholar.google.com/scholar?q=related:oEsKmJvdn-MJ:scholar.google.com/&scioq=&hl=en&as_sdt=0,43&scilib=1 https://scholar.google.com/scholar?q=related:oEsKmJvdn-MJ:sc... Who can update and revoke which records in a permissioned blockchain (or a plain old database, for that matter)? Letsencrypt has a model for proving domain control with ACME; which AFAIU depends upon DNS, too.
fedotovcorp 8y ago
It is necessary to consider in the framework of a specific case, but REMME WebAuth is just an example of how to use dPKI with a centralized application. Here you can see the demo: https://webauth-testnet.remme.io/register https://webauth-testnet.remme.io/register

StreamBright 8y ago

You mean, just to have it painfully slow, use obscene amount of energy and be vulnerable of 50%+ attacks? Yeah it is great. Not. :)

r32a_ 8y ago
Blockchain doesn't have to use PoW, which uses a lot of energy
- fedotovcorp 8y ago
  Current blockchain uses Proof-of-Service algorithm that doesn't need a lot of energy but based on stakes and reputation. Here it is the detailed article about it https://medium.com/remme/proof-of-service-consensus-algorithm-overview-57c359290207 https://medium.com/remme/proof-of-service-consensus-algorith...
gjs278 8y ago
>painfully slow you can send coins securely with Ark in less than 8 seconds >use obscene amount of energy not in Ark, or any other DPOS >be vulnerable of 50%+ attacks what is merged mining, DPOS, renewable energy? the world may never know.
- StreamBright 8y ago
  Sorry I am not up to date with 2019 bullshit bingo, these mean nothing: Ark, DPOS, merged mining
  - gjs278 8y ago
    ark is a coin. dpos is an alternative to proof of work. you get paid by holding the coin. merged mining is from 2012, it’s when two coins use the same algorithm so you can mine both at the same time, securing both chains
hnbroseph 8y ago
perhaps you're referring to implementation details of bitcoin?