Trusted Identifier

From MgmtWiki
Revision as of 14:34, 4 December 2018 by Tom (talk | contribs) (Solutions)

Jump to: navigation, search

Full Title or Meme

A Trusted Identifier is deployed by Entities that wish to be known on the internet for who they are in the real world.

Context

Problems

  • See the wiki page on Trusted Location for a list of the ways that a URL can be spoof to see why it is a bad idea to expect users to get a Trusted Identifier from a URL.
  • EV Certs were introduced to give user's good knowledge of who was behind a web site. They didn't work out as planned as shown on the EV Cert wiki page.

Solutions

  1. Every real world Entity, be it a legal Entity or a legal name, like a Brand will have one place on the web for making an Identity statement.
  2. That Identity statement MUST be accessed by a URL at a well-known location in a relevant domain.
  3. That Identity statement MAY be accessed at multiple locations that are locale specific for language or other purposes.
  4. That Entity will have a standard URN of the form TID:framework:LUID, where the framework will represent a set of rules that the Entity agrees to follow in all of its online transactions.

Contents of site at the URL for the Trusted Identifier.

N0, Name Typical use User Experience
1 Identifier URN TID:framework:LUID
2 List of required user attributes always needed proof of presence (for example)
3 List of requested user attribute above and beyond the above passport, drivers license
4 Privacy policy URL DOI or URN
5 Terns of use URL DOI or URN
6 Signature Type fixed list RSA2048 (for example)
7 Signature hex value 134bbead23d908e0a3221bc

References

  • The wiki page Trusted Location describes a solution to the problem on not knowing the trustworthiness or intent of a web page that is displayed on a user's browser window.