[Freedombox-discuss] Identity UI
melvincarvalho at gmail.com
Sun Jun 24 07:31:11 UTC 2012
On 24 June 2012 02:33, Nick M. Daly <nick.m.daly at gmail.com> wrote:
> On Sat, 23 Jun 2012 10:27:26 +0200, Michiel de Jong <michiel at unhosted.org>
> > On Sat, Jun 23, 2012 at 7:23 AM, Nick M. Daly <nick.m.daly at gmail.com>
> > > So, identity is pretty fundamental to this project. Without identity,
> > > privacy is a meaningless concept.
> > good point!
> > > The FreedomBox identifies a person or group of people through their
> > > keys.
> > IIUC, that seems to be design choice aimed at power users. You access
> > your freedombox from either your laptop, or your phone, or an internet
> > cafe, right? That means that you need to configure the key on your
> > laptop, then configure it on your phone, and then export it onto a usb
> > stick, then put the usb stick in your wallet, take it with you on
> > holidays, not lose it, take it into the internet cafe, stick it into
> > the computer there, and know how to use it to install use your key on
> > this computer at the internet cafe.
> Keep two things in mind:
> I'm talking about identity management here, not key management. Knowing
> somebody else's key and using that on the backend to keep track of other
> folks' identities is a very different thing than managing your own key
> on any particular device.
> Also, regardless of whether we're talking about key or identity
> management, we should be able to simplify the UI to help make this
> something that's not just a power user thing. The hardest part (in the
> UI, to me anyway) is that keys and users are many-to-many related. It
> makes for a fairly messy address-book.
> When we do tackle key management, the key could exist on the remote box
> alone and the user could log into the box, unlocking the key there. If
> we don't tie identity to a specific type of key, we could use OTP or OTR
> keys instead of GPG keys sometimes, to help mitigate keystorage
>From what I understand GPG will be one of the cornerstones of freedombox
identity, and I see no reason why this should not be the case.
The way I do it is to tie my key into my profile. This is the old
fashioned style of putting your public key in your home page. ( Example :
These days you can do it a lot more cleanly by including your key,
fingerprint etc. in machine readable HTML. The key also sits on the
traditional GPG key servers, giving you access to the best of all worlds,
and this paradigm is compatible with webbox.
Multiple keys is a case of adding more keys to your profile. If I'm not
mistaken you can already do this on "my profile". It does lead to an
interesting question of whether there should be a "preferred key". Also
the GPG paradigm has master and subkeys iirc
BTW I spoke with one of the webbox authors yesterday, and he's interested
I already talk to a few of the other authors ( timbl, oshani etc. ) so I
think we'll be able to get guidance from the top minds in the space, if we
go down the freedombox/webbox route. A great solution taking the best of
FLOSS and the best of the Web, IMHO it makes a lot of sense.
> Freedombox-discuss mailing list
> Freedombox-discuss at lists.alioth.debian.org
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Freedombox-discuss