Identosphere #209: DIDComm gets formal • SSI Is Dead - Long Live SSI • G7 Mapping Exercise
Everything related to decentralized identity and verifiable credentials including standards and development: updates, walkthroughs, from the enterprise to web3, real world use, policy and research.
This is from an email thread on the topic of digital identity, which is the twice-yearly subject of the Internet Identity Workshop, the most leveraged conference I know.
At the Internet Identity Workshop 38, I announced my talk with a description something like this:
Five years ago at this conference, Trinsic’s first product (our self-sovereign identity wallet app) was launched. Today, I’m hosting a session called “SSI didn’t work. Trinsic is pivoting.”
The post I'm responding to makes a point about people resisting its conclusions because their livelihoods depend on it. But let’s be real—Trinsic depends on this too, just as much as mine does.
Technical Challenges: Resources invested in Steward node upgrades diverted to TestNet issues, straining resources.
Governance and Community Involvement: Limited involvement from the Steward community in governance burdened Trustees with heavy debt from previous Board.
The Council is the governing group for the association, providing guidance and direction as we navigate the evolving world of digital identity in Aotearoa.
Deadline for nominations: 4 November
Scheduled for 10:00am on Thursday, 5 December 2024
Online voting will take place in advance of the meeting, with results announced at the Annual Meeting
This report presents a mapping exercise to identify commonalities in digital identity approaches among G7 members that can support future interoperability efforts. These commonalities include shared concepts and definitions, the use of international technical standards and approaches to levels of assurance.
The #Path #Forward 🚀 Adoption of digital wallets, decentralized identity frameworks, and verifiable DPPs is accelerating, merging citizen, enterprise, and machine identities into seamless global systems.
This report presents a mapping exercise to identify commonalities in digital identity approaches among G7 members that can support future interoperability efforts. These commonalities include shared concepts and definitions, the use of international technical standards and approaches to levels of assurance.
In our work, we formally look into whether DIDComm’s combination of encryption and key derivation schemes achieves the claimed security properties. However, we exclude digital signatures from our analysis. [...] Thus, formally capturing DIDComm’s security goals is a big part of our work. To do this, we studied its specification and related standards and also comprehensively reviewed the main implementations in Python and Java, and even coded our own improvements, as described next.
This paper provides an evaluation of a selection of distributed identity methods, and analyzes their properties based on the categorization specified in the W3C recommendation rubric.
The most interesting difference between GNAP and OAuth 2 is that GNAP no longer requires clients to be registered in advance. With OAuth the client_id and client_secret need to be configured for each application, which means applications need to register with their targets - creating a new application on GitHub or Twitter before implementing the authorization flow, for example.
Germany has officially launched the German part of the EUDI Wallet initiative, a significant advancement in digital identity management as part of the broader European eIDAS 2.0 regulation.
AuvoDigital, a platform specializing in organizational identity and verifiable credentialing, uses IOTA Identity to simplify organizational identity management with its AutoID application, and IOTA EVM to power AuvoComply, its compliance application featuring secure, reusable KYC/AML solutions and scalable wallet verification.
To make it easier to consume our capabilities, we have made some changes to our terminology to describe credentials supported by MATTR platforms by their underlying technology and standards.
mDocs: Previously referred to as Mobile credentials.
the series aims to share our ongoing progress, learnings, and reflections on building a digital permissioning system designed to unlock underutilised spaces in the city for civic use, through introducing participatory and distributed forms of spatial governance.
Through the user journey exercise, we were able to clearly distinguish the differences between the three types of permission processes: pre-defined/automated, exception-based, and bespoke permissions.
Embracing the world of mDLs and ISO/IEC 18013-5 has been an exciting journey for me. [...] However, the recent introduction to the W3C VCs standard by my friend Leo has been a game-changer.
According to a report by IoT Analytics, there were 16.6 billion connected IoT devices by the end of 2023. This is projected to grow 13% to 18.8 billion by the end of 2024. As digitalization touches nearly every aspect of life — from payments to services — it’s crucial to adopt secure, interoperable, and user-friendly models for managing digital identities and data.
This conduit is anti-lock-in, it works for nearly the whole internet. It is surveillance-resistant, far more accessible than the web or any mobile app interface. It is my secret super-power.
