4 ms·

Web3 offers digital identities owned by the type of strategy the blockchain uses. Do you use Bitcoin and tomorrow Venezuela buys up 51% of global hashing power

Web3 offers digital identities owned by the type of strategy the blockchain uses. Do you use Bitcoin and tomorrow Venezuela buys up 51% of global hashing power? Your identity is now managed by Venezuela, have fun

dcow 4y ago
Yeah I am bearish on the web3 identity space because it’s chain infected. They are attacking the right problems but IMO not deploying the right solution. Just allow self-signed identity not backed by a chain.
- AstixAndBelix 4y ago
  Self signed identity is meaningless, especially online
  - dcow 4y ago
    How does putting your ID on a chain or even having an identity provider vouch for it change anything? By your logic being a human is meaningless because anybody can do it. Self-signed identity means you own a private key. Being a human means you own a body. You can call yourself whatever you want in meatspace. People deal with it. You can sign whatever statements you want in cyberspace. If you need to verify that someone has passed a driving test, then yes you need an authority to issue a certificate (or whatever better tech you choose) saying this private key met these requirements. There's no inherent problem with the identity being self-signed if you just need a user-id.
    - AstixAndBelix 4y ago
      Identity cannot be self-signed. "Self signed identity" as you call it is just a pseudonym. Anyone who has access to your private key can post with your "identity" and there is no way for checking fraudolent usage. If you see two instances of an account signing something with the same private key you cannot say that those two actions belong to the same person. You can only say that those two actions were performed by some entity which knows the private key. It could be the righful owner, it could be a hacker, it could be a bot. On the other hand, a real ID check makes sure with a high degree of certainty that the person is actually the same one who performed other actions (was born, purchased a home, has money, etc.)
      - dcow 4y ago
        I can use a pseudonym in real life. Nobody is "hard checking" my identity 99% of the time. Not even the government. They don't care if someone else does my taxes. It's up to me to share details about my identity with my tax accountant as I see fit. About the only institutions that actually care are banks because they don't want to give my money to someone else and airports because they don't want 9/11. So yes, you can have self-signed identity. And you can use it 99% of the time. If you need government-level identity verification, you can build that, do the hard check, and link to a self-signed identity by issuing a certificate for a reasonable amount of time until a re-check is desired. Your drivers license is exactly that in physical form. I'm not saying we shouldn't have a digital DMV that issues digital drivers licenses. I'm saying you don't need that as the foundation of your identity system. Identity is self-sovereign by nature. Don't fight it.
- k__ 4y ago
  As far as I know, DIDs don't have to be "on chain".
  - dcow 4y ago
    If DIDs are just a self-signed document format/spec for what the fields look like and how to handle/process one and how to attach signed assertions then great! That's all we need. I thought the idea was you'd publish your identity to a chain and the chain would "ratify" it or something. That part seems unnecessary.
- hanniabu 4y ago
  Why is Ethereum not the right solution?
hanniabu 4y ago
Nothing is happening on Bitcoin anymore. Bitcoin is not web3. Everything interesting happening is on Ethereum. Read up on account abstraction: https://blog.jarrodwatts.com/what-is-account-abstraction-and-how-does-eip-4337-work https://blog.jarrodwatts.com/what-is-account-abstraction-and... https://twitter.com/DefiIgnas/status/1633626349226319872 https://twitter.com/DefiIgnas/status/1633626349226319872 > 5/ Account abstraction is a huge breakthrough for crypto self-custody. > It enables: > • Create & restore a wallet with an email or a phone number > • 1-Click transactions > • App pre-approvals & limits > • 2FA protection > and much more.

dcow 4y ago

Yeah I am bearish on the web3 identity space because it’s chain infected. They are attacking the right problems but IMO not deploying the right solution. Just allow self-signed identity not backed by a chain.

AstixAndBelix 4y ago
Self signed identity is meaningless, especially online
- dcow 4y ago
  How does putting your ID on a chain or even having an identity provider vouch for it change anything? By your logic being a human is meaningless because anybody can do it. Self-signed identity means you own a private key. Being a human means you own a body. You can call yourself whatever you want in meatspace. People deal with it. You can sign whatever statements you want in cyberspace. If you need to verify that someone has passed a driving test, then yes you need an authority to issue a certificate (or whatever better tech you choose) saying this private key met these requirements. There's no inherent problem with the identity being self-signed if you just need a user-id.
  - AstixAndBelix 4y ago
    Identity cannot be self-signed. "Self signed identity" as you call it is just a pseudonym. Anyone who has access to your private key can post with your "identity" and there is no way for checking fraudolent usage. If you see two instances of an account signing something with the same private key you cannot say that those two actions belong to the same person. You can only say that those two actions were performed by some entity which knows the private key. It could be the righful owner, it could be a hacker, it could be a bot. On the other hand, a real ID check makes sure with a high degree of certainty that the person is actually the same one who performed other actions (was born, purchased a home, has money, etc.)
    - dcow 4y ago
      I can use a pseudonym in real life. Nobody is "hard checking" my identity 99% of the time. Not even the government. They don't care if someone else does my taxes. It's up to me to share details about my identity with my tax accountant as I see fit. About the only institutions that actually care are banks because they don't want to give my money to someone else and airports because they don't want 9/11. So yes, you can have self-signed identity. And you can use it 99% of the time. If you need government-level identity verification, you can build that, do the hard check, and link to a self-signed identity by issuing a certificate for a reasonable amount of time until a re-check is desired. Your drivers license is exactly that in physical form. I'm not saying we shouldn't have a digital DMV that issues digital drivers licenses. I'm saying you don't need that as the foundation of your identity system. Identity is self-sovereign by nature. Don't fight it.
k__ 4y ago
As far as I know, DIDs don't have to be "on chain".
- dcow 4y ago
  If DIDs are just a self-signed document format/spec for what the fields look like and how to handle/process one and how to attach signed assertions then great! That's all we need. I thought the idea was you'd publish your identity to a chain and the chain would "ratify" it or something. That part seems unnecessary.
hanniabu 4y ago
Why is Ethereum not the right solution?

hanniabu 4y ago

Nothing is happening on Bitcoin anymore. Bitcoin is not web3. Everything interesting happening is on Ethereum. Read up on account abstraction: https://blog.jarrodwatts.com/what-is-account-abstraction-and-how-does-eip-4337-work https://blog.jarrodwatts.com/what-is-account-abstraction-and... https://twitter.com/DefiIgnas/status/1633626349226319872 https://twitter.com/DefiIgnas/status/1633626349226319872 > 5/ Account abstraction is a huge breakthrough for crypto self-custody. > It enables: > • Create & restore a wallet with an email or a phone number > • 1-Click transactions > • App pre-approvals & limits > • 2FA protection > and much more.