Trusted URLs via Cryptographic Signatures

Edmond wrote: post #2

SDK: https://github.com/CipherTrustee/certisfy-js Web of trust use case example: https://bsky.app/profile/bitlooter.bsky.social Experimenting with Keybase key holders as CAs: https://www.reddit.com/r/Keybase/comments/1q5ys71/using_keyb... Cryptographic Implementation of Exclusivity Agreements: https://github.com/CipherTrustee/certisfy-claim-recipes/tree... Build Your Own Trust Chain: https://blog.certisfy.com/2026/04…

what was the hardest part about this project?

Re: Trusted URLs via Cryptographic Signatures

#4

Post by Edmond » Thu, Jul 30, 2026, 3:24 PM UTC

pluto_modadic wrote: post #3

Edmond wrote: post #2

SDK: https://github.com/CipherTrustee/certisfy-js Web of trust use case example: https://bsky.app/profile/bitlooter.bsky.social Experimenting with Keybase key holders as CAs: https://www.reddit.com/r/Keybase/comments/1q5ys71/using_keyb... Cryptographic Implementation of Exclusivity Agreements: https://github.com/CipherTrustee/certisfy-claim-recipes/tree... Build Your Own Trust Chain: https://blog.certisfy.com/2026/04…

what was the hardest part about this project?

Everything :)

But I wouldn't characterize it in terms of being hard.

It's been a work in progress for many years,... so more of a problem solving and exploratory endeavor.

Re: Trusted URLs via Cryptographic Signatures

#5

Post by AtHeartEngineer » Thu, Jul 30, 2026, 3:29 PM UTC

Edmond wrote: post #2

SDK: https://github.com/CipherTrustee/certisfy-js Web of trust use case example: https://bsky.app/profile/bitlooter.bsky.social Experimenting with Keybase key holders as CAs: https://www.reddit.com/r/Keybase/comments/1q5ys71/using_keyb... Cryptographic Implementation of Exclusivity Agreements: https://github.com/CipherTrustee/certisfy-claim-recipes/tree... Build Your Own Trust Chain: https://blog.certisfy.com/2026/04…

Just emailed you, I'm working on something similar https://github.com/MinistryofMany

it's basically an OIDC provider as an identity wallet using verifiable credentials, but I've got a "share link" system built in where you can share specific credentials/proofs with others.

Re: Trusted URLs via Cryptographic Signatures

#6

Post by mahemm » Thu, Jul 30, 2026, 3:31 PM UTC

How does this differ from e.g. S3 pre-signed URLs?

Re: Trusted URLs via Cryptographic Signatures

#7

Post by canadiantim » Thu, Jul 30, 2026, 3:49 PM UTC

Edmond wrote: post #2

SDK: https://github.com/CipherTrustee/certisfy-js Web of trust use case example: https://bsky.app/profile/bitlooter.bsky.social Experimenting with Keybase key holders as CAs: https://www.reddit.com/r/Keybase/comments/1q5ys71/using_keyb... Cryptographic Implementation of Exclusivity Agreements: https://github.com/CipherTrustee/certisfy-claim-recipes/tree... Build Your Own Trust Chain: https://blog.certisfy.com/2026/04…

How do you foresee this being implemented or made popularly available?

Re: Trusted URLs via Cryptographic Signatures

#8

Post by westurner » Thu, Jul 30, 2026, 4:13 PM UTC

How to implement signed URLs with W3C DID keys and W3C Verifiable Credentials?

Re: Trusted URLs via Cryptographic Signatures

#9

Post by Retr0id » Thu, Jul 30, 2026, 4:22 PM UTC

What happens if the destination/contents of the URL changes after I sign it?

Re: Trusted URLs via Cryptographic Signatures

#10

Post by tgma » Thu, Jul 30, 2026, 4:46 PM UTC

Google AMP had the concept of Signed Exchanges so that you can host content on a third party server while proving its integrity https://developer.chrome.com/blog/signed-exchanges

Unfortunately, AMP itself was controversial and the system was not really adopted elsewhere, but it is something.