@wizzwizz4 always great to see people thinking about identity! The project has been quiet lately but I am very close to releasing a better way of working with Keyoxide, not needing PGP, just pure Ed25519!
And after that, I'd like to experiment with methods based solely on domain ownership, no cryptography.
I don't fully grok OP's envisioned approach yet, but I suppose that's coming somewhat near?
@keyoxide @wizzwizz4 @adora yup, i just finished a draft of the suggestion that should be a bit easier to grasp the idea of as it has everything in one place!
and warning: as i'm a person who doesn't know how cryptography works it might possibly be better to remove that part at all ^^'
https://gist.github.com/nullium21/eefcfa353772a1b5e56f2d91362da979
@lina @keyoxide @wizzwizz4 @adora
Suggestions:
- Identity server may serve did:web identity documents.
- Instead of identity
and publicKey.signature
properties, actor object may contain FEP-c390 identity proofs.
This would make your proposal compatible with existing web standards and allow identity system to evolve (it can support different key types and signature algorithms, and identity servers can be replaced with user-owned identities).