I was recently talking with someone evangelizing the Keyoxide idea for verification of non-fediverse targets. In other words, me demonstrating that I control Twitter account A, Facebook account B, Google account C, etc. by publishing the same globally unique value to each of these and then using that unique value to ‘prove’ to others that I am who I say I am by virtue of all the account based properties I’ve been able to memorialize my unique value to. One the one hand I see a certain reasonableness to this approach, on the other hand it feels like there are some big gotchas that I’m not thinking about.
Anyone familiar with this line of thinking or thoughts / cautionary tails about it in general?
Thanks.
-S
From: Orie Steele <orie@transmute.industries>
Sent: Monday, November 28, 2022 8:52 AM
To: John, Anil <anil.john@hq.dhs.gov>
Cc: W3C Credentials CG <public-credentials@w3.org>
Subject: Re: Suggested Reading (was: Applications of DIDs to Federated Social Media)
A downside of the fediverse model is having so many potential servers used for impersonation... Some folks are already reporting issues with this:
https://twitter.com/CISAJen/status/1595114055588810752
OS
On Mon, Nov 28, 2022 at 10:17 AM John, Anil <anil.john@hq.dhs.gov <mailto:anil.john@hq.dhs.gov> > wrote:
Interesting to note the active presence of both W3C (https://w3c.social) and the European Union (https://social.network.europa.eu) on Mastodon/Fediverse!
W3C ActivityPub https://www.w3.org/TR/activitypub/ is very much meeting the moment and is a testament to the foundational work of the W3C Social Web Working Group!
Best Regards,
Anil
Anil John
Technical Director, Silicon Valley Innovation Program
Science and Technology Directorate
US Department of Homeland Security
Washington, DC, USA
Email Response Time – 24 Hours
<https://www.dhs.gov/science-and-technology>
--
ORIE STEELE
Chief Technical Officer
www.transmute.industries <http://www.transmute.industries>
<https://www.transmute.industries/>
