<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><br>
</p>
<div class="moz-cite-prefix">On 12. 03. 25 19:34, Jon Callas wrote:<br>
</div>
<blockquote type="cite"
cite="mid:2BE27F52-72A6-4DDE-8FC7-D391C7289F99@callas.org">
<pre class="moz-quote-pre" wrap="">
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">On Mar 12, 2025, at 00:06, Marek Tichy <a class="moz-txt-link-rfc2396E" href="mailto:marek@gn.apc.org"><marek@gn.apc.org></a> wrote:
On 11. 03. 25 22:03, Jerry Leichter wrote:
</pre>
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">...Proof of Human is the cornerstone of the networks security.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">I don't see any hope of being able to prove that an entity on the network is human, given even the current state of AI (and it only gets harder from here). That train left the station.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">I disagree here. The vast majority of our immediate peers we still have
in person interactions with on a fairly regular basis. This is all that is
required to bootstrap the security of the network.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">But that has nothing to do with proof of humanity. You already know your peers are human - they need prove nothing to you.
Then again, most of the people I interact with I almost never meet physically. I've only ever met a few of the members of this list, for example.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Have we lost the web-of-trust track here? If Bob who I know in person tells me that Alice is a person then I have very good reasons to believe that Alice is a person, even though I never met her.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
Do you?
There seems to be an assumption in here that a person would neither lie nor be mistaken about it. I have long comments, but a short one here is how you'd handle a pseudonym. How does a person who wants to have a pseudonym and be known by that demonstrate they're a person?
Personally, I think the web-of-trust is problematic in many ways, one of the primary ones being the issue I bring up in the previous paragraph. How does someone who has a pseudonym get verified?</pre>
</blockquote>
<span
style="color: rgb(0, 0, 0); font-family: sans-serif; font-size: medium; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: normal; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;"><span>DID
is </span>globally unique identifier of person Alice in the
ledger</span>. One important concept within SSI is "pairwise
identifiers" (or pairwise IDs). When Alice wants to consume my
service S, she will ALWAYS do it through a "pairwise pseudonym X" .
In other words, every actor has an unlimited number of pseudonyms,
no third party ever gets to see the actual DID. <br>
<p>I as a provider of service S can verify that X is a valid
identifier generated from the valid entry in the ledger (valid DID).
"Valid" means that there were two humans Bob and Cecilia, who at
some point gave their mutual consent to Alice for creating her
DID.<span
style="color: rgb(55, 65, 81); font-family: Söhne, Roboto, ui-sans-serif, system-ui, -apple-system, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: pre-wrap; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;"></span></p>
<p>S can also on top of that request that the pseudonym X presents
some additional Verifiable Credentials like "The holder of this
certificate has passed a Turing test (CAPTCHA) at least once" (or
"Is over 18" or "Has a valid driving license" etc...). But it
doesn't and mustn't care about the actual name AT ALL. Anonymous
proof of x/y/z... is the core principle of Self-Sovereign Identity
(SSI) systems.<br>
<br>
-- Marek <br>
</p>
<p><span
style="color: rgb(55, 65, 81); font-family: Söhne, Roboto, ui-sans-serif, system-ui, -apple-system, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: pre-wrap; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;">
</span></p>
<p><br>
<span
style="color: rgb(55, 65, 81); font-family: Söhne, Roboto, ui-sans-serif, system-ui, -apple-system, Ubuntu, Cantarell, "Noto Sans", sans-serif, "Helvetica Neue", Arial, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji"; font-size: 16px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; white-space: pre-wrap; text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial; display: inline !important; float: none;"></span></p>
<blockquote type="cite"
cite="mid:2BE27F52-72A6-4DDE-8FC7-D391C7289F99@callas.org">
<pre class="moz-quote-pre" wrap="">
Jon
_______________________________________________
The cryptography mailing list
<a class="moz-txt-link-abbreviated" href="mailto:cryptography@metzdowd.com">cryptography@metzdowd.com</a>
<a class="moz-txt-link-freetext" href="https://www.metzdowd.com/mailman/listinfo/cryptography">https://www.metzdowd.com/mailman/listinfo/cryptography</a>
</pre>
</blockquote>
</body>
</html>