Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

A Primer for Decentralized Identifiers

w3c-ccg.github.io

Post reply on HN
Print view View original

11–16 of 16 posts

Re: A Primer for Decentralized Identifiers

#11

Post by hhjj »

capableweb wrote: post #8
lucb1e wrote: post #7

Aside from a spec that tells the "how", I don't understand what or why it is. What problem does this solve? How can or should I use this?

It's mentioned in the "How DIDs Differ from Other Globally Unique Identifiers" section. > The need for globally unique identifiers that do not require a centralized registration authority is not new. UUIDs (Universally Unique Identifiers, also called GUIDs, Globally Unique Identifiers) were developed for this purpose in the 1980s and standardized first by the Open Software Foundation and then by IETF RFC 4122. > As a…

A lot of time you don't need to identify people, you just need unique accounts. There is no fundamental need to have one identity linked on HN, reddit, Facebook.

Re: A Primer for Decentralized Identifiers

#12

Post by dane-pgp »

tgbugs wrote: post #10

I find the choice to use ownership language strange. The url/uri based systems are fundamentally inadequate for many if not most of their current use cases (they are not and never were intended to be persistent), and as the authors point out, there the urn system requires a central authority. Thus there is a need for some other system. The ability to claim and prove authorship and determine the provenance (or tamperi…

> If you want to publish a document and distribute it in a way that its integrity and authorship can be determined there aren't good options.

Perhaps the situation would be a little better if browsers supported Hashlinks[0]. The integrity hash in the URL would ensure that that the document returned is the one intended by the person who gave you the link.

I don't think it quite makes sense for a browser to store an address book of identities with associated public keys, but if an author hosts their document on a domain that is associated with them (and has a TLS certificate, recorded in a Certificate Transparency log) then the visitor can be reasonably sure of the document's authorship.

For good measure, the document should include in its body the domain name of the site where it is hosted, to avoid any weird problems with redirects.

[0] https://w3c-ccg.github.io/hashlink/

Re: A Primer for Decentralized Identifiers

#14

Post by coderintherye »

lucb1e wrote: post #7

Aside from a spec that tells the "how", I don't understand what or why it is. What problem does this solve? How can or should I use this?

Imagine you run a community college and want to identify students, but wish to do so in a privacy-preserving manner. Keep in mind you need to identify them from the high schools or other colleges they are transferring from as well as you'll need to identify them to the colleges they transfer to after.

DIDs allow for creating network wide identifiers that can be digitally verified. They work great in conjunction with verifiable credentials. So now you can keep and share records on students using their DID. You can create a unique DID for each student, even a unique id for each record which maps back to the student's DID.

It may not seem like much, but it forms the basis for creating systems where identity can be kept private, even from the individuals administering the system.

Re: A Primer for Decentralized Identifiers

#15

Post by capableweb »

hhjj wrote: post #11
capableweb wrote: post #8

Earlier quoted context omitted.

It's mentioned in the "How DIDs Differ from Other Globally Unique Identifiers" section. > The need for globally unique identifiers that do not require a centralized registration authority is not new. UUIDs (Universally Unique Identifiers, also called GUIDs, Globally Unique Identifiers) were developed for this purpose in the 1980s and standardized first by the Open Software Foundation and then by IETF RFC 4122. > As a…

A lot of time you don't need to identify people, you just need unique accounts. There is no fundamental need to have one identity linked on HN, reddit, Facebook.

Agree! None of these specifications are required to be implemented. They are there to cover the use cases outlined in the specifications themselves, so feel free to pick and chose which ones to follow. Obviously it's better for the open web if you use them when you're implementing something for your use case, rather than coming up with a new specification that is similar but incompatible.

But as you say, if you're implementing something that doesn't require global identifiers in a decentralized/distributed context, don't use DIDs :)

Re: A Primer for Decentralized Identifiers

#16

Post by bmn__ »

lucb1e wrote: post #7

Aside from a spec that tells the "how", I don't understand what or why it is. What problem does this solve? How can or should I use this?

First impression from someone who implements lots of Web specs: it reeks of bull crap. I don't see the point in standardising a new URI schema. The example shown at https://w3c.github.io/did-core/#parts-of-a-did> comes with much expense: verbosity, dereferencing (i.e. network round-trip) to get a document with additional required information and drags in the json-ld spec for no good reason.

If I were in charge of minting identifiers, I would always just use the http URI schema; the controller/verification stuff could be simply appended right there. With just a modicum of care and planning, the URIs will last as long as the Web itself. http://enwp.org/PURL http://w3id.org

Post reply on HN