Re: [Din] WSJ article on Identity and Blockchains

Jon Crowcroft <Jon.Crowcroft@cl.cam.ac.uk> Sun, 08 April 2018 10:38 UTC

Return-Path: <Jon.Crowcroft@cl.cam.ac.uk>
X-Original-To: din@ietfa.amsl.com
Delivered-To: din@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id DE0FD12895E for <din@ietfa.amsl.com>; Sun, 8 Apr 2018 03:38:57 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.21
X-Spam-Level:
X-Spam-Status: No, score=-4.21 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, T_RP_MATCHES_RCVD=-0.01] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vWBS5oU_bVvK for <din@ietfa.amsl.com>; Sun, 8 Apr 2018 03:38:56 -0700 (PDT)
Received: from mta0.cl.cam.ac.uk (mta0.cl.cam.ac.uk [128.232.25.20]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id D13DD12426E for <din@irtf.org>; Sun, 8 Apr 2018 03:38:55 -0700 (PDT)
Received: from ely.cl.cam.ac.uk ([128.232.64.213] ident=jac22) by mta0.cl.cam.ac.uk with esmtp (Exim 4.63) (envelope-from <Jon.Crowcroft@cl.cam.ac.uk>) id 1f57in-0004gH-Gx; Sun, 08 Apr 2018 11:38:53 +0100
From: Jon Crowcroft <Jon.Crowcroft@cl.cam.ac.uk>
To: Thomas Hardjono <hardjono@mit.edu>
cc: "din@irtf.org" <din@irtf.org>, Jon Crowcroft <Jon.Crowcroft@cl.cam.ac.uk>
In-reply-to: <5E393DF26B791A428E5F003BB6C5342AE73F70FC@OC11EXPO33.exchange.mit.edu>
References: <5E393DF26B791A428E5F003BB6C5342AE73F70FC@OC11EXPO33.exchange.mit.edu>
Comments: In-reply-to Thomas Hardjono <hardjono@mit.edu> message dated "Fri, 06 Apr 2018 16:34:16 -0000."
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-ID: <36114.1523183933.1@ely.cl.cam.ac.uk>
Content-Transfer-Encoding: quoted-printable
Date: Sun, 08 Apr 2018 11:38:53 +0100
Message-Id: <E1f57in-0004gH-Gx@mta0.cl.cam.ac.uk>
Archived-At: <https://mailarchive.ietf.org/arch/msg/din/UCzVflZHZqikB5EqpC18GPAz7ms>
Subject: Re: [Din] WSJ article on Identity and Blockchains
X-BeenThere: din@irtf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Discussion of distributed Internet Infrastructure approaches, aspects such as Service Federation, and underlying technologies" <din.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/din>, <mailto:din-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/din/>
List-Post: <mailto:din@irtf.org>
List-Help: <mailto:din-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/din>, <mailto:din-request@irtf.org?subject=subscribe>
X-List-Received-Date: Sun, 08 Apr 2018 10:38:58 -0000

very nice article...

so you _are_ your social network...in terms of trustworthy identity...sure...

there's two problems with this though in details...
i.e. how we build on this idea technically in the Din context...

1/ its still dependent on technologies, 
and there's a seperate issue of why we trust them to proxy our social net -
i certainly would it find it hard to trust any social media app, running on a cloud platform,
using a smart mobile device, to vouch for all these friends & colleagues - too many layers, too many
vested interests, too much Cambridge Analytica :)

2/ I though many people in the security community were moving away from
proving identity, towards systems that prove entitlement (i.e. credentials
are on a need-to-know basis, so if you were say 19, you don't need to say yur age or show id, 
but you can't buy a drink in cambridge MA, but you can in cambridge, UK :)

bootstrapping something from a BC to provide the credentials is also problematic, in that
BC needs a PKI to know whether nodes are not sybils, spoofs, etc, so we have a circular dependance, no?

maybe i missed an important step, if so, sorry!


> Folks,
> 
> I thought to share this WSJ article with the DIN group. Relevant in the 
> light of recent interest in using BC for identity.
> 
> Advance apologies if it offends some people :-)
> 
> https://blogs.wsj.com/cio/2018/04/03/digital-identity-is-broken-heres-a-way-to-fix-it/
> 
> 
> Below is a link to a PDF version.
> 
> http://hardjono.mit.edu/sites/default/files/documents/WSJ_Digital_Identity_is_Broken.pdf
> 
> 
> Best
> 
> -- thomas --
> 
> _______________________________________________
> Din mailing list
> Din@irtf.org
> https://www.irtf.org/mailman/listinfo/din
>