#NetIDTLS - Twitter Hashtag

over 3 years ago

3. Copy & pasted ni: scheme #URI to my designated #Mastodon profile page 4. Started a #TLS session using the #NetIDTLS extended handshake 5. #Identity verified, courtesy of lookups and comparisons across local and public data performed during handshake #Identity #Authenticity

3

2

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Another #Identity #Authenticity demo. This time around, I am using one of my #Mastodon profile pages as the public credentials source dereferenced from the subject identifier in my private #X509 cert during the #NetIDTLS extended #TLS-handshake. https://t.co/3qT0Xjue7B #DPKI

1

3

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Here's a link to an end-to-end live demo of #Identity #Authenticity via #NetIDTLS extended #TLS-handshake that leverages an #X509 cert generated by @oplyouid. https://t.co/OSE7hIiBwS #SSI #Privacy #DPKI #NetID #YouID

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Final testing as we get ready to release the next edition of @oplyouid that includes support for #Bitcoin and #Ethereum blockchains as credentials sources re #TLS-based authentication using #NetID lookups. #SSI #Blockchain #Identity #Authenticity #DataConnectivity #HyperData

kidehen's tweet photo. Final testing as we get ready to release the next edition of @oplyouid that includes support for #Bitcoin and #Ethereum blockchains as credentials sources re #TLS-based authentication using #NetID lookups.

#SSI #Blockchain #Identity #Authenticity #DataConnectivity #HyperData https://t.co/HjnRFYdvac

0

6

3

0

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Now that I've explained #NetIDTLS conceptually. What follows is a breakdown of how this works if you choose a #Bitcoin or #Ethereum #Blockchain as the external credentials source when generating an #X509 cert via our @oplyouid app or browser ext. #Identity #Authenticity #SSI

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

The #NetIDTLS extension to #TLS simply uses points 1-3 above to determine #Identity #Authenticity using existing #PKI infrastructure in a decentralized (rather than centralized) manner. All of this "just works" using existing open standards that are already broadly in use.

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Dereferencing a subject identifier in an #X509 certificate can resolve to an external credentials graph that comprises additional machine-computable entity relationship semantics usable for credentials verification and claims attestation. #Identity #Authenticity #TLS #NetIDTLS

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

What is #NetIDTLS and how does it work? NetID-TLS is an extension to the default #TLS-handshake that adds dereference (lookup or resolution) of an #X509 subject identifier to session initialization. #WebIDTLS is a variant that confines the identifier scheme to #HTTP.

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Beyond digitally signed #emails, what else can I do with these credentials? Use them for #identity #authenticity via #HTTPS against servers that implement enhanced #TLS-handshakes (e.g., #NetIDTLS) that lookup identifiers embedded in a tokenized credentials #KnowledgeGraph.

1

2

0

Kingsley Uyi Idehen

@kidehen

over 3 years ago

Latest #LinkInBio discovery: @oplyouid successfully used my @calcom profile page (https://t.co/AZ3nJynEDg) as the public credentials source for self-sovereign #Identity #Authenticity using #NetIDTLS. Proof. https://t.co/3KNEUGwPCS #SSI #PKI #DPKI #TLS #ZeroTrust #Web30 #X509

1

2

3

1

0

Kingsley Uyi Idehen

@kidehen

about 4 years ago

@EmekaOkoye My #X509 cert holds information that's computed during its creation, and re-computed en route to #blockchain lookup during #TLS-handshake. That's why its #NetIDTLS rather than #WebIDTLS i.e., different protocol at various layers.

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 4 years ago

#TypoFix: @oplyouid makes this *user-friendly!* i.e., a user can easily perform the copy and paste action that completes the "mirrored credentials" triangle. #Identity #Privacy #Web30 #PKI #DPKI #TLS #NetIDTLS #NetID #SemanticWeb #LinkedData

0

2

1

0

Kingsley Uyi Idehen

@kidehen

over 4 years ago

What is this? Part of a "mirrored credentials" triangle that enables my @twitter homepage function as a #NetIDTLS profile doc re #DPKI i.e., #PKI enhanced via a #Hyperlink hook into a #SemanticWeb. @oplyouid makes this use-friendly! #Identity #Privacy #LinkedData #YouID #NetID

1

2

1

0

Kingsley Uyi Idehen

@kidehen

over 4 years ago

@cboettig @westurner @choldgraf @internetarchive @DataONEorg We use both ni: and di: Hash URI schemes in our @oplyouid credentials generator as the basis for the #NetIDTLS #authentication protocol. Basically, using SHA Fingerprints as claims mirrored across an #X509 cert and a personal profile doc re #DPKI :) #NetID #YouID #TLS #PKI