Re: [pkng] WebID - RESTful Authentication for the Social Web

On 13 Oct 2010, at 08:28, Leif Johansson wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 10/12/2010 10:41 PM, Henry Story wrote:
>> Hi, 
>> 
>>  just before closing down this mailing list you may be interested in WebID (aka foaf+ssl) which
>> uses PKI based TLS in a decentralised manner without changing anything to the TLS communication, but
>> by shifting the authentication algorithm server side. This allows one to use non CA signed certificates to log in globally. Trust is very flexible in this system, and is built on a web of published relationships in the Linked Data network.
>> 
>> There is quite a lot of detailed information here:
>> 
>>   http://esw.w3.org/Foaf%2Bssl
> 
> Does it support anything that looks like signing or is it just
> authentication?

Currently we have only just explored authentication. I am not sure how
good the javascript APIs are at getting the browser to sign pieces of
text after asking the user to select a key.... If they can be made to
do that then the advantage of WebID is to possibly enable millions of people
to have public keys.

I think the payswarm folks want to put the certificate in a flash store, making
it easier to do things like signing....

> 
> 	Cheers Leif
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.10 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
> 
> iEYEARECAAYFAky1X7AACgkQ8Jx8FtbMZnemaACdGz+Cjf/bHlw0H6T2AqRHc8lp
> PnwAoIx7S/AIiFfwFTVHiLBmc+pdygOy
> =F4ID
> -----END PGP SIGNATURE-----
> _______________________________________________
> pkng mailing list
> pkng@irtf.org
> https://www.irtf.org/mailman/listinfo/pkng

Social Web Architect
http://bblfish.net/