42 articles tagged Identity.
One of the most fundamental questions in any identity or authorization system is how does the system know that the party presenting a credential is actually entitled to use it?
Read article: Bearer, Proof of Possession, and Sender Vouches: Three Ways to Trust an IdentityFor years, identity protocols have used phrases such as Holder of Key, Proof of Possession, Key Binding, and Bearer almost interchangeably.
Read article: Holder of Key vs. Proof of Possession: Two Sides of Cryptographic IdentityDisclaimer: I’m not a lawyer. I’m just trying to understand how this works.
Read article: Digital Death: Legal FrameworksI like this one. It sits right at the intersection of AI, identity, law, and just enough existential dread to make people double-check their password manager.
Read article: The AI-Enhanced Afterlife: No ThanksI started thinking about this post a while back when I saw a former colleague’s Medium profile still listed as following mine. He died in the early days of covid. A quick check showed that his LinkedIn profile seems to have disappeared — not sure how that works. It was still there a few years ago.
Read article: The Digital Dead: Existence Beyond Death OnlineIf you’ve ever read a specification like WebAuthn, DID Core, SD-JWT VC, BBS Signatures, OID4VCI, or OID4VP, you’ve probably encountered references to P-256, secp256k1, Ed25519, or BLS12–381.
Read article: Elliptic Curve Groups: The Mathematical Engine Behind Modern Digital IdentityModern identity systems have a bit of a hoarding problem.
Read article: Data Minimization: Why Does the Coffee Shop Need to Know My Blood Type?For most of the history of digital identity, we’ve had a remarkably simple solution to the question, “Who are you?”
Read article: Decentralized Identifiers: Because Apparently We Needed to Rethink the Name FieldOAuth2 has always had a fundamental problem: a bearer token is a bearer token. After all, it’s a bearer token.
Read article: DPoP Support Comes to the Identity Protocol Debugger
