Self-issued Identifier: Difference between revisions
Jump to navigation
Jump to search
| Line 9: | Line 9: | ||
* Self-issued Identifiers of all types depend on secret values held by the user in portable protected storage, for example a smartphone or WebAuthn key. | * Self-issued Identifiers of all types depend on secret values held by the user in portable protected storage, for example a smartphone or WebAuthn key. | ||
* If the user's hardware device is stolen or disable, the recover of the user's identifier can be a challenge which could turn into a UX nightmare if not handled well. | * If the user's hardware device is stolen or disable, the recover of the user's identifier can be a challenge which could turn into a UX nightmare if not handled well. | ||
* In particular the SIOP program has been developing standards which look a lot like the DIA and other work in the Kantara work groups without any coordination. | |||
==References== | ==References== | ||
Revision as of 01:21, 17 June 2020
Full Title or Meme
Wiki Page to track the use of [[1]] in the Identity Ecosystem
Context
- With the rise of the W3C program on Decentralized Identifiers, there is a need for the Identity Ecosystem to coordinate with other teams developing this technology.
- At the 2020-06-16 meeting of the FIRE WG a liaison effort was approved. That effort is tracked here.
Problems
- The current work of the Decentralized Identifiers has proceed with little concern for how it might integrate with existing Identity Ecosystems.
- Self-issued Identifiers of all types depend on secret values held by the user in portable protected storage, for example a smartphone or WebAuthn key.
- If the user's hardware device is stolen or disable, the recover of the user's identifier can be a challenge which could turn into a UX nightmare if not handled well.
- In particular the SIOP program has been developing standards which look a lot like the DIA and other work in the Kantara work groups without any coordination.
References
- Client Bound End-User Assertion
- Self-Issued OpenID Connect Provider DID Profile
- another wiki page on Self-issued ID
- wiki page on Self-issued OpenID Provider
- wiki page on Self-Sovereign Identity
- Using OpenID Connect Self-Issued to Achieve DID Auth from Mike Jones
- Who is the special openid connect url issued to and is it a risk? http://self-issued.me