4 ms·
Like anything OAuth2-related, it's frustratingly vague and jargony. Verifiable credentials is a terrible name. We have had verifiable cryptographic credentials
by vintermann 4y ago
Like anything OAuth2-related, it's frustratingly vague and jargony.
Verifiable credentials is a terrible name. We have had verifiable cryptographic credentials for more than 40 years.
What I want, is a practical protocol to prove to a third party
1. That I am a real person (e.g, has a unique credential issued by my government)
2. That I'm the only one currently "logged in" with them, with that credential.
3. Without the third party, (and with as few parties as mathematically possible) knowing which of the people with a credential issued by my government I am.
In short, to prove that I'm a real person, that I'm not running an army of sockpuppets, and yet preserve my privacy.
- enricotal 4y agoVerifiable credentials (VC) It's a name that comes from: https://www.w3.org/TR/vc-data-model/ https://www.w3.org/TR/vc-data-model/
- vdfs 4y agoFunny how identity0.io (from the website example) was registered less than 24 hours ago
- red_Seashell_32 4y agoIt’s likely that someone else registered that. When this was posted, domain was still not taken
- jaywalk 4y agoThat's a pretty egregious error from a company as large as Auth0/Okta.
- red_Seashell_32 4y agoIndeed! My initial thought was that they just misconfigured SSL, but other user here pointed out that it’s likely taken by someone else
- MichaelZuo 4y agoWhat makes you believe that the fewest parties mathematically possible is meaningfully small? For example, if the lower bound is hundreds then it's mostly superfluous since that information will eventually leak one way or another.