š
Original date posted:2014-03-31
š Original message:The idea was not to register profiles or any human identity, or associate it with any other identity directly. Neither was it to have a massive BlockChain, or use proof of work. In this case proof of work is detrimental to security - you want as many people to know about your keys as quickly as possible. I want to add that this implies a shadow p2p network.
Also it's just a point if view, but I thought it better not to have any specific link to a person's identity, or their Bitcoin "identity" by which I mean no connection to their public addresses. The device keys are not meant to be a permanent identity or to store encrypted data either (think what happens if the device changes hands), so the use case is only to establish secure communications, and to verify signatures whilst still in use by the owner. A new owner would need to establish a new device key - again this is in the details and probably more specific to the project.
Regards
Chris D'Costa
> On 31 Mar 2014, at 13:46, Natanael <natanael.l at gmail.com> wrote:
>
> This sounds like Namecoin. You can already register profiles with it,
> including keypairs. onename.io is a web-based client you can use to
> register on the Namecoin blockchain.
>
>> On Mon, Mar 31, 2014 at 1:14 PM, Chris D'Costa <chris.dcosta at meek.io> wrote:
>> Security of transmission of person-to-person pay-to addresses is one of the use cases that we are addressing on our hardware wallet.
>>
>> I have yet to finish the paper but in a nutshell it uses a decentralised ledger of, what we refer to as, "device keys".
>>
>> These keys are not related in any way to the Bitcoin keys, (which is why I'm hesitating about discussing it here) neither do they even attempt to identify the human owner if the device. But they do have a specific use case and that is to provide "advanced knowledge" of a publickey that can be used for encrypting a message to an intended recipient, without the requirement for a third-party CA, and more importantly without prior dialogue. We think it is this that would allow you to communicate a pay-to address to someone without seeing them in a secure way.
>>
>> As I understand it the BlockChain uses "time" bought through proof of work to establish a version of the truth, we are using time in the reverse sense : advanced knowledge of all pubkeys. Indeed all devices could easily check their own record to identify problems on the ledger.
>>
>> There is of course more to this, but I like to refer to the "distributed ledger of device keys" as the "Web-of-trust re-imagined" although that isn't strictly true.
>>
>> Ok there you have it. The cat is out of the bag, feel free to give feedback, I have to finish the paper, apologies if it is not a topic for this list.
>>
>> Regards
>>
>> Chris D'Costa
>>
>>
>>> On 31 Mar 2014, at 12:21, vv01f <vv01f at riseup.net> wrote:
>>>
>>> Some users on bitcointalk[0] would like to have their vanity addresses
>>> available for others easily to find and verify the ownership over a kind
>>> of WoT. Right now they sign their own addresses and quote them in the
>>> forums.
>>> As I pointed out there already the centralized storage in the forums is
>>> not secury anyhow and signed messages could be swapped easily with the
>>> next hack of the forums.
>>>
>>> Is that use case taken care of in any plans already?
>>>
>>> I thought about abusing pgp keyservers but that would suit for single
>>> vanity addresses only.
>>> It seems webfinger could be part of a solution where servers of a
>>> business can tell and proof you if a specific address is owned by them.
>>>
>>> [0] https://bitcointalk.org/index.php?topic=502538
>>> [1] https://bitcointalk.org/index.php?topic=505095
>>>
>>> ------------------------------------------------------------------------------
>>> _______________________________________________
>>> Bitcoin-development mailing list
>>> Bitcoin-development at lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Bitcoin-development mailing list
>> Bitcoin-development at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/bitcoin-development
Chris D'Costa [ARCHIVE] /
npub1qvā¦x33a6
2023-06-07 15:16:48
in reply to nevent1qā¦8kl3
Author Public Key
npub1qvgc8w7mhjaspd7y2z9xuywch4xdll2rm6vy598rnmw0cuvezqnqfx33a6Published at
2023-06-07 15:16:48Event JSON
{
"id": "11205fddb27a885eb25ba7270141355c724417aafd94b7cffe76690caafc8636",
"pubkey": "031183bbdbbcbb00b7c4508a6e11d8bd4cdffd43de984a14e39edcfc71991026",
"created_at": 1686151008,
"kind": 1,
"tags": [
[
"e",
"3af4773a7d3999abaf86aa3389ec302dbe50833abc483e267452e56f13cf34e1",
"",
"root"
],
[
"e",
"db9b815f9a206d2612685a8aab3b17b8b1fc74ea53f19e15564762d4f77659aa",
"",
"reply"
],
[
"p",
"f14f3c71a4e63a12c842e4a50471263ada4b6cfde093fcb6588693a726b9b018"
]
],
"content": "š
Original date posted:2014-03-31\nš Original message:The idea was not to register profiles or any human identity, or associate it with any other identity directly. Neither was it to have a massive BlockChain, or use proof of work. In this case proof of work is detrimental to security - you want as many people to know about your keys as quickly as possible. I want to add that this implies a shadow p2p network.\n\nAlso it's just a point if view, but I thought it better not to have any specific link to a person's identity, or their Bitcoin \"identity\" by which I mean no connection to their public addresses. The device keys are not meant to be a permanent identity or to store encrypted data either (think what happens if the device changes hands), so the use case is only to establish secure communications, and to verify signatures whilst still in use by the owner. A new owner would need to establish a new device key - again this is in the details and probably more specific to the project.\n\nRegards\n\nChris D'Costa\n\n\n\n\n\u003e On 31 Mar 2014, at 13:46, Natanael \u003cnatanael.l at gmail.com\u003e wrote:\n\u003e \n\u003e This sounds like Namecoin. You can already register profiles with it,\n\u003e including keypairs. onename.io is a web-based client you can use to\n\u003e register on the Namecoin blockchain.\n\u003e \n\u003e\u003e On Mon, Mar 31, 2014 at 1:14 PM, Chris D'Costa \u003cchris.dcosta at meek.io\u003e wrote:\n\u003e\u003e Security of transmission of person-to-person pay-to addresses is one of the use cases that we are addressing on our hardware wallet.\n\u003e\u003e \n\u003e\u003e I have yet to finish the paper but in a nutshell it uses a decentralised ledger of, what we refer to as, \"device keys\".\n\u003e\u003e \n\u003e\u003e These keys are not related in any way to the Bitcoin keys, (which is why I'm hesitating about discussing it here) neither do they even attempt to identify the human owner if the device. But they do have a specific use case and that is to provide \"advanced knowledge\" of a publickey that can be used for encrypting a message to an intended recipient, without the requirement for a third-party CA, and more importantly without prior dialogue. We think it is this that would allow you to communicate a pay-to address to someone without seeing them in a secure way.\n\u003e\u003e \n\u003e\u003e As I understand it the BlockChain uses \"time\" bought through proof of work to establish a version of the truth, we are using time in the reverse sense : advanced knowledge of all pubkeys. Indeed all devices could easily check their own record to identify problems on the ledger.\n\u003e\u003e \n\u003e\u003e There is of course more to this, but I like to refer to the \"distributed ledger of device keys\" as the \"Web-of-trust re-imagined\" although that isn't strictly true.\n\u003e\u003e \n\u003e\u003e Ok there you have it. The cat is out of the bag, feel free to give feedback, I have to finish the paper, apologies if it is not a topic for this list.\n\u003e\u003e \n\u003e\u003e Regards\n\u003e\u003e \n\u003e\u003e Chris D'Costa\n\u003e\u003e \n\u003e\u003e \n\u003e\u003e\u003e On 31 Mar 2014, at 12:21, vv01f \u003cvv01f at riseup.net\u003e wrote:\n\u003e\u003e\u003e \n\u003e\u003e\u003e Some users on bitcointalk[0] would like to have their vanity addresses\n\u003e\u003e\u003e available for others easily to find and verify the ownership over a kind\n\u003e\u003e\u003e of WoT. Right now they sign their own addresses and quote them in the\n\u003e\u003e\u003e forums.\n\u003e\u003e\u003e As I pointed out there already the centralized storage in the forums is\n\u003e\u003e\u003e not secury anyhow and signed messages could be swapped easily with the\n\u003e\u003e\u003e next hack of the forums.\n\u003e\u003e\u003e \n\u003e\u003e\u003e Is that use case taken care of in any plans already?\n\u003e\u003e\u003e \n\u003e\u003e\u003e I thought about abusing pgp keyservers but that would suit for single\n\u003e\u003e\u003e vanity addresses only.\n\u003e\u003e\u003e It seems webfinger could be part of a solution where servers of a\n\u003e\u003e\u003e business can tell and proof you if a specific address is owned by them.\n\u003e\u003e\u003e \n\u003e\u003e\u003e [0] https://bitcointalk.org/index.php?topic=502538\n\u003e\u003e\u003e [1] https://bitcointalk.org/index.php?topic=505095\n\u003e\u003e\u003e \n\u003e\u003e\u003e ------------------------------------------------------------------------------\n\u003e\u003e\u003e _______________________________________________\n\u003e\u003e\u003e Bitcoin-development mailing list\n\u003e\u003e\u003e Bitcoin-development at lists.sourceforge.net\n\u003e\u003e\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development\n\u003e\u003e \n\u003e\u003e ------------------------------------------------------------------------------\n\u003e\u003e _______________________________________________\n\u003e\u003e Bitcoin-development mailing list\n\u003e\u003e Bitcoin-development at lists.sourceforge.net\n\u003e\u003e https://lists.sourceforge.net/lists/listinfo/bitcoin-development",
"sig": "36ede60919befa66757fe2a420a2ac730e60bfd70529bd096f5944c6e822ef1130d1945d8de8242ec85fb7425500d90779387817256027754a3062dec7a082d9"
}