"Is 'acceptably non-dystopian' self-sovereign identity even possible?"

An essay about self-sovereign identity, decentralized identity, verifiable credentials, soulbound tokens, and all those other terms that have been flying around lately.

blog.mollywhite.net/is-accepta

@molly0xfff

How can centralization help implement privacy-preserving Sybil resistance? (Not rhetorical, I'm sometimes out of the loop with protocols such as escrow.)

If there's privacy, it's hard to know who people are even if you're centralized; Wikipedia for example (where the problem is called "sock puppets").

Sybil resistance sounds good to me, I'm getting sick of waking up in strange rooms in weird clothes trying to find my wallet and not recognizing the name on any of the ID cards.

@Sandra @molly0xfff I've been toying with the idea of verifiable credentials myself, for a good decade and a half, actually, and I genuinely think there is potential there. There are a couple of things the blockchain world gets very wrong, though, the first of which is that it needs to involve any kind of blockchain/record.

But the far more worrying thing is that they all seem to want to enforce things computationally about people. That's the dystopian bit.

@Sandra @molly0xfff Privacy and centralization is really more of a question of which data you reveal to whom. Let's say you do want to receive money to your bank account. As Swiss numbered bank accounts show, you really just need to provide an opaque identifier of sorts to achieve that.

You want to verify that it's at a particular bank? Have that bank sign it. You want to verify that it's owned by some person? Have the bank sign a hash over the person's id...

@Sandra @molly0xfff ... and the opaque identifier. You don't need the bank to provide the person ID, because the person will do so.

The problem I see in most approaches is that they're inflexible; they try to prove some global truth, and in order to capture enough use cases, they include and leak more data than is necessary for each individual use case.

Implementors should focus a lot more on how the offline world already operates.

As another example, in...

@jens

"You don't need the bank to provide the person ID, because the person will do so."

And that's not a solution, it's kicking the can down the road🤷🏻‍♀️

@Sandra Yes, actually, because it's about minimizing data. What else is privacy but that?

@jens

The problem was proving identity. "The bank has seen a proof of identity" isn't a solution to creating such proofs of identity in the first place.

@Sandra Of course it is. That's the whole point.

You don't need to prove identity in the vast majority of use cases, you just need to prove that such proof exists. You need to be able to trust that proof-of-proof, which means you need to trust someone else to issue trustworthy proof-of-proofs.

In the banking case, the obvious issuer is the bank; they have a vested interest in it after all. In other use cases, less centralisation may be better.

@jens

That's not the point at all!

Like, here I am wondering how to make a painting and then all I hear is advice for how to picture frames over the mantle! And then when I'm like "How do I make paint" and you're like "How to hang the frame is of course the whole point."
Follow

@Sandra I'd be happy to phrase it differently, but I'm not sure what you're asking, then. Because the original proving of identity, the root I am referring to, is a solved problem. We've been doing variations of it long before the digital realm got involved.

@jens


"Because the original proving of identity, the root I am referring to, is a solved problem."

And I caveated as much in my original question; that I was not asking "whether" but "how".

Here in Sweden it's a huge issue.

ID is based on providing your last ID within five years of its issuing. If it lapses you're SOL, and they ask for employers, registered roommates, utility bills etc.

Digitally it's based on having a specific app from Play or Apple. It's Not Good.

And, if The State can't even figure it out, how can something like Wikipedia?
Sign in to participate in the conversation
Finkhäuser Social

A private instance for the Finkhäuser family.