News for hackers. Stuff that matters.
Re:Irma: Open-source, attribute based credentials by themihai on Saturday January 23, 2021 @11:15AM (#25883318)
How is this different than openID connect? It would be nice to have a table with pro/cons/differences of different protocols on that page.
Re:Irma: Open-source, attribute based credentials by formerly_proven on Saturday January 23, 2021 @11:46AM (#25883727)
Attribute-based credentials refers to cryptographic systems where someone can produce a proof that they fulfill a certain attribute. Canonical examples are things like an employee ID card, where the ID card can produce a proof that they're an employee, have clearance level X or are part of group Y without the proof containing any information beyond that. Another example would be things like national ID cards, where you could make a check for "is older than 18 years" and the system only receives a cryptographically-verifiable answer to that question, without being able to infer anything else.
Re:Irma: Open-source, attribute based credentials by coldcog on Saturday January 23, 2021 @12:11PM (#25884059)
Indeed the attribute-based nature of IRMA makes it more general than OpenID Connect. Users can collect all sorts of attributes in their IRMA app, and then selectively disclose any subset of those attributes, as appropriate to the use case. This includes authentication like OpenID Connect (e.g. the user could disclose a username attribute), but also other use cases such as indeed proving that you are older than 18, or anonymously proving membership of a group (using unlinkability, see below), or providing authenticated personal data such as your address or date of birth.
Re:Irma: Open-source, attribute based credentials by jeroenhd on Saturday January 23, 2021 @11:50AM (#25883769)
It doesn't serve the exact same intention openID does. Authentication is part of the spec, but its real power lies in the privacy properties IRMA provides.

You can find a better global overview of the protocol and why it was created on this page: https://privacybydesign.foundation/irma-explanation/

Re:Irma: Open-source, attribute based credentials by coldcog on Saturday January 23, 2021 @12:01PM (#25883913)
In addition to this, a more technical overview of IRMA and its features can be found here: https://irma.app/docs/overview
Re:Irma: Open-source, attribute based credentials by radicalbyte on Saturday January 23, 2021 @11:23AM (#25883421)
The privacy properties. With OpenID connect you have traceability - for example if it was used for a vaccine passport, and said passport was required to enter shops, bars, sports venues.. then it would be very easy for the companies implementing the "point of check" devices to track your movements.

With IDE mix that isn't possible.