Re: [Din] WSJ article on Identity and Blockchains

Thomas Hardjono <hardjono@mit.edu> Tue, 10 April 2018 16:49 UTC

Return-Path: <hardjono@mit.edu>
X-Original-To: din@ietfa.amsl.com
Delivered-To: din@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 0C43012E042 for <din@ietfa.amsl.com>; Tue, 10 Apr 2018 09:49:33 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.2
X-Spam-Level:
X-Spam-Status: No, score=-4.2 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, SPF_PASS=-0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id B0FExu6HpcYt for <din@ietfa.amsl.com>; Tue, 10 Apr 2018 09:49:30 -0700 (PDT)
Received: from dmz-mailsec-scanner-7.mit.edu (dmz-mailsec-scanner-7.mit.edu [18.7.68.36]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id B1B2D12E04A for <din@irtf.org>; Tue, 10 Apr 2018 09:49:28 -0700 (PDT)
X-AuditID: 12074424-c8fff700000042c3-a9-5acceb1683eb
Received: from mailhub-auth-3.mit.edu ( [18.9.21.43]) (using TLS with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client did not present a certificate) by dmz-mailsec-scanner-7.mit.edu (Symantec Messaging Gateway) with SMTP id 24.94.17091.61BECCA5; Tue, 10 Apr 2018 12:49:26 -0400 (EDT)
Received: from outgoing-exchange-1.mit.edu (OUTGOING-EXCHANGE-1.MIT.EDU [18.9.28.15]) by mailhub-auth-3.mit.edu (8.13.8/8.9.2) with ESMTP id w3AGnOCJ017620; Tue, 10 Apr 2018 12:49:25 -0400
Received: from W92EXEDGE5.EXCHANGE.MIT.EDU (W92EXEDGE5.EXCHANGE.MIT.EDU [18.7.73.22]) by outgoing-exchange-1.mit.edu (8.13.8/8.12.4) with ESMTP id w3AGnMiG019183; Tue, 10 Apr 2018 12:49:24 -0400
Received: from OC11EXCAS22.exchange.mit.edu (18.9.1.47) by W92EXEDGE5.EXCHANGE.MIT.EDU (18.7.73.22) with Microsoft SMTP Server (TLS) id 14.3.339.0; Tue, 10 Apr 2018 12:49:06 -0400
Received: from OC11EXPO33.exchange.mit.edu ([169.254.1.111]) by oc11excas22.exchange.mit.edu ([18.9.1.47]) with mapi id 14.03.0352.000; Tue, 10 Apr 2018 12:49:22 -0400
From: Thomas Hardjono <hardjono@mit.edu>
To: Brian E Carpenter <brian.e.carpenter@gmail.com>, "din@irtf.org" <din@irtf.org>
Thread-Topic: [Din] WSJ article on Identity and Blockchains
Thread-Index: AQHTzcUHgLU9VkLMR0+I6ZGjg4OG6aP28xeAgADGQICAADbKgIACSeiT
Date: Tue, 10 Apr 2018 16:49:21 +0000
Message-ID: <5E393DF26B791A428E5F003BB6C5342AE7404E4C@OC11EXPO33.exchange.mit.edu>
References: <5E393DF26B791A428E5F003BB6C5342AE73F70FC@OC11EXPO33.exchange.mit.edu> <E1f57in-0004gH-Gx@mta0.cl.cam.ac.uk> <CAPaG1Amqd8DehMpvht8zEPzqHg00wqYcUDXb0g-bQebTvbXWzw@mail.gmail.com>, <fb88b314-c402-7f39-79ea-01c46fdf16ec@gmail.com>
In-Reply-To: <fb88b314-c402-7f39-79ea-01c46fdf16ec@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [18.9.1.93]
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrNKsWRmVeSWpSXmKPExsUixCmqrSv2+kyUwZVvNhZtF/cxWSz9uJfF gclj56y77B6TNx5mC2CK4rJJSc3JLEst0rdL4MqY8OU1Y0GfbMX6w8vZGhhPiHcxcnJICJhI TLz3hLWLkYtDSGAxk8TD6+eYIJwDjBKNe1uhMscYJTZ9bGOBcLYzSmz5eooZwlnNKPFnyXwm kGFsAhoSbT962UFsEYFYiS0nvjCC2MICVhLr761n62LkAIpbS+xZHg5R4iaxbN5uVhCbRUBV 4lvnfjYQm1cgSGLH/2dQmz8xSjw98BxsDqeArUTH5iYWEJtRQEzi+6k1YHuZBcQlbj2BuEFC QFBi0ew9zBC2mMS/XQ/ZIGxZiV+nrzNC1OtILNj9iQ3C1pZYtvA1M8RiQYmTM5+wTGAUn4Vk 7CwkLbOQtMxC0rKAkWUVo2xKbpVubmJmTnFqsm5xcmJeXmqRrrlebmaJXmpK6SZGULyxu6js YOzu8T7EKMDBqMTDe+HWmSgh1sSy4srcQ4ySHExKorw7rgGF+JLyUyozEosz4otKc1KLDzFK cDArifD+uAeU401JrKxKLcqHSUlzsCiJ8y7evzdKSCA9sSQ1OzW1ILUIJivDwaEkwSv0CqhR sCg1PbUiLTOnBCHNxMEJMpwHaPiflyDDiwsSc4sz0yHypxh1OTreT+lhFmLJy89LlRLn9QAZ JABSlFGaBzcHnCbZPcVeMYoDvSXM+xtkFA8wxcJNegW0hAloyTEfsCUliQgpqQbGTbOnX+o6 VbXmm0v004SQyQu6fmq975mQkqYxf+ae38sPL1Jk/SJ0/+e/ayp8p0+yMbsWPwjbM4tXfiVb XoIrr/GZ/WGT3n7d9um609m/gvu3WF7RjohpyxFJqNBXzOO0aRQT2OCu+mBm8PMew2rWO7EK Xzcm6QZu3bKQObYtY8nS52LtL87LKrEUZyQaajEXFScCABhSgSVuAwAA
Archived-At: <https://mailarchive.ietf.org/arch/msg/din/l1lTB3TyeNCXBaWUAImpVWdtCjk>
Subject: Re: [Din] WSJ article on Identity and Blockchains
X-BeenThere: din@irtf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: "Discussion of distributed Internet Infrastructure approaches, aspects such as Service Federation, and underlying technologies" <din.irtf.org>
List-Unsubscribe: <https://www.irtf.org/mailman/options/din>, <mailto:din-request@irtf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/din/>
List-Post: <mailto:din@irtf.org>
List-Help: <mailto:din-request@irtf.org?subject=help>
List-Subscribe: <https://www.irtf.org/mailman/listinfo/din>, <mailto:din-request@irtf.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Apr 2018 16:49:39 -0000

>>> From: Din [din-bounces@irtf.org] on behalf of Brian E Carpenter [brian.e.carpenter@gmail.com]
>>> ...
>>> That isn't a marginal case. Tens or hundreds of millions of people
>>> would need cross-border digital ID these days. Sales argument: would
>>> help to defeat money laundering.

Lots of people seem to want to provide digital-identity on a global scale immediately. from day 1.

Some folks even imagine there will be one huge global blockchain for the entire world :-)

But there is a lot to be learned from the history how IP routing emerged (e.g. days when
we only had IS-IS for local routing, not even OSPF).

Just like there is "autonomous systems" (AS) concept in routing and connected via backbone routing,
in the area of identity there needs to be the equivalent of an AS.

I've been calling it "communities" (data communities) for humans and personal data.

Its by interlinking ASes (communities) do we get scale and get identity services to be globally reachable.

So anytime I hear about a global blockchain to rule them all, I cringe :-)


-- thomas -- 





________________________________________
From: Din [din-bounces@irtf.org] on behalf of Brian E Carpenter [brian.e.carpenter@gmail.com]
Sent: Sunday, April 08, 2018 9:44 PM
To: din@irtf.org
Subject: Re: [Din] WSJ article on Identity and Blockchains

On 09/04/2018 10:28, Arjuna Sathiaseelan wrote:
>>
>> 2/ I though many people in the security community were moving away from
>> proving identity, towards systems that prove entitlement (i.e. credentials
>> are on a need-to-know basis, so if you were say 19, you don't need to say
>> yur age or show id,
>> but you can't buy a drink in cambridge MA, but you can in cambridge, UK :)
>>
>
> digital id plays a major role for all the KYC/AML - massive market.. + for
> employment etc..

Right, but *international* digital ID is a hopeless mess. Just try dealing
with a USA bank's KYC department when living in New Zealand with a UK
passport. Nothing works.

That isn't a marginal case. Tens or hundreds of millions of people
would need cross-border digital ID these days. Sales argument: would
help to defeat money laundering.

   Brian

> like the idea of proving entitlement - works nicely with crypto
> charities/aid delivery..
>
> Regards
>
>
>
>
>> bootstrapping something from a BC to provide the credentials is also
>> problematic, in that
>> BC needs a PKI to know whether nodes are not sybils, spoofs, etc, so we
>> have a circular dependance, no?
>>
>> maybe i missed an important step, if so, sorry!
>>
>>
>>> Folks,
>>>
>>> I thought to share this WSJ article with the DIN group. Relevant in the
>>> light of recent interest in using BC for identity.
>>>
>>> Advance apologies if it offends some people :-)
>>>
>>> https://blogs.wsj.com/cio/2018/04/03/digital-identity-
>> is-broken-heres-a-way-to-fix-it/
>>>
>>>
>>> Below is a link to a PDF version.
>>>
>>> http://hardjono.mit.edu/sites/default/files/documents/WSJ_
>> Digital_Identity_is_Broken.pdf
>>>
>>>
>>> Best
>>>
>>> -- thomas --
>>>
>>> _______________________________________________
>>> Din mailing list
>>> Din@irtf.org
>>> https://www.irtf.org/mailman/listinfo/din
>>>
>> _______________________________________________
>> Din mailing list
>> Din@irtf.org
>> https://www.irtf.org/mailman/listinfo/din
>>
>
>
>
>
>
> _______________________________________________
> Din mailing list
> Din@irtf.org
> https://www.irtf.org/mailman/listinfo/din
>

_______________________________________________
Din mailing list
Din@irtf.org
https://www.irtf.org/mailman/listinfo/din