News for hackers. Stuff that matters.
Re:Auth0 Verifiable Credentials by vintermann on Wednesday November 02, 2022 @03:46AM (#33432442)
Like anything OAuth2-related, it's frustratingly vague and jargony.

Verifiable credentials is a terrible name. We have had verifiable cryptographic credentials for more than 40 years.

What I want, is a practical protocol to prove to a third party

1. That I am a real person (e.g, has a unique credential issued by my government)

2. That I'm the only one currently "logged in" with them, with that credential.

3. Without the third party, (and with as few parties as mathematically possible) knowing which of the people with a credential issued by my government I am.

In short, to prove that I'm a real person, that I'm not running an army of sockpuppets, and yet preserve my privacy.

Re:Auth0 Verifiable Credentials by enricotal on Wednesday November 02, 2022 @07:04AM (#33433907)
Verifiable credentials (VC) It's a name that comes from:

https://www.w3.org/TR/vc-data-model/

Re:Auth0 Verifiable Credentials by vdfs on Wednesday November 02, 2022 @08:12AM (#33434448)
Funny how identity0.io (from the website example) was registered less than 24 hours ago
Re:Auth0 Verifiable Credentials by red_Seashell_32 on Wednesday November 02, 2022 @10:06AM (#33435998)
It’s likely that someone else registered that. When this was posted, domain was still not taken
Re:Auth0 Verifiable Credentials by jaywalk on Wednesday November 02, 2022 @10:31AM (#33436424)
That's a pretty egregious error from a company as large as Auth0/Okta.
Re:Auth0 Verifiable Credentials by red_Seashell_32 on Wednesday November 02, 2022 @11:43AM (#33437682)
Indeed! My initial thought was that they just misconfigured SSL, but other user here pointed out that it’s likely taken by someone else
Re:Auth0 Verifiable Credentials by MichaelZuo on Monday November 07, 2022 @12:47AM (#33501669)
What makes you believe that the fewest parties mathematically possible is meaningfully small?

For example, if the lower bound is hundreds then it's mostly superfluous since that information will eventually leak one way or another.