Trusted Identifier

From MgmtWiki
Revision as of 13:18, 4 December 2018 by Tom (talk | contribs) (Solutions)

Jump to: navigation, search

Full Title or Meme

A Trusted Identifier is deployed by Entities that wish to be known on the internet for who they are in the real world.

Context

Problems

  • See the wiki page on Trusted Location for a list of the ways that a URL can be spoof to see why it is a bad idea to expect users to get a Trusted Identifier from a URL.
  • EV Certs were introduced to give user's good knowledge of who was behind a web site. They didn't work out as planned as shown on the EV Cert wiki page.

Solutions

  1. Every real world Entity, be it a legal Entity or a legal name, like a Brand will have one place on the web for making an Identity statement.
  2. That Identity statement MUST be accessed by a URL at a well-known location in a relevant domain.
  3. That Identity statement MAY be accessed at multiple locations that are locale specific for language or other purposes.
  4. That Entity will have a standard URN of the form TID:framework:LUID, where the framework will represent a set of rules that the Entity agrees to follow in all of its online transactions.

References

  • The wiki page Trusted Location describes a solution to the problem on not knowing the trustworthiness or intent of a web page that is displayed on a user's browser window.