Resource sharing demo [and review of auth systems]

[harlantwood]

Demo should include:

• Distributed identity & auth via any of (in current order of preference):
  • https://github.com/uport-project/uport-connect
  • FIDO UAF (Universal Authentication Framework): https://fidoalliance.org/specifications/overview/ (unclear if it works well with decentralized stack)
  • https://github.com/bitpay/bitauth
  • https://github.com/blockstack/blockstack-auth-js
  • https://github.com/mdp/dotp (needs investigation)
  • https://github.com/digitalbazaar/authorization.io
  • See also responses to this tweet: https://twitter.com/harlantwood/status/807888527224487936
• Rating a resource creates a JSON-LD claim signed with this identity's private key
• Ability to view ratings

Design:

[harlantwood]

authorization.io path blocked on figuring out the authorization.io API: credential-handler/authn.io#41

[harlantwood]

Awesome design by @adamapollo 😄

[mdp]

I wrote 'dotp' mostly as an experiment around the UX of authenticating with your phone via airgap. It's not been audited, and I'm enough of a cryptography expert to know that I'm not a cryptography expert :) So please don't use it for anything serious.

That being said, happy to help where I can.

[harlantwood]

Thanks @mdp! Much appreciated.

[harlantwood]

For the record, I asked for feedback on this topic and got some advice in this tweet thread: https://twitter.com/harlantwood/status/807888527224487936

[harlantwood]

Update: I bumped uPort to the top of the auth list above. Very active development, seems promising.

https://github.com/uport-project/uport-connect