15 karma · joined February 10, 2020
ipfs add test.asc added QmX1yKeerXb9vSYoQXcZuuw1QFTu5UxDCec4hY9htjRYE7 test.asc
and retrieve it https://cloudflare-ipfs.com/ipfs/QmX1yKeerXb9vSYoQXcZuuw1QFT...
if you have an ENS name you can access it this way: https://cloudflare-ipfs.com/ipns/atmarketplace.eth/
https://github.com/ryanchapman/go-any-proxy
It is pretty good you can masquerade it (configure it as a transparent proxy for any outbound TCP traffic and it uses HTTP CONNECT to proxies that support it to proxy the connection.) If you're looking to unwrap SSL traffic you can use sslsplit, too.
1. nobody has suggested it as an alternative; nobody wants to completely get rid of the system we have now. PKI requires electronics to create and verify signatures created with the keypairs.
2. Because financial institutions do not care and it's not their prerogative. The social security administration is not responsible for people's credit reports and as far as their concerned their is no problem.
3. People are afraid to try new things and new technology and it's up to the government to see that it's done correctly. Theoretically a problem could arise from somebody making a business out of "keeping track of your private key for you" which negates the purpose entirely.
4. People are lazy, and not everybody cares and doesn't necessarily speak to the benefit of people who don't care about their credit or their identity which is why I say it should be an option.
5. If cryptography fails, then the whole thing is pointless. But, I think most people will agree if cryptography fails we will have much bigger problems.
The solution I have in mind is similar to what I've seen with "paper bitcoin wallets" where you have two QR codes: a public and a private key. Imagine a social security card with two QR codes. When you create a bank account, or when you get a state id or something you can get another set of qr codes, that have a record of signatures provided by a state department's private key or that of a financial institution along with a signature provided by your social security card. With your new set you can safely put away your social security card. The idea being, signatures can represent business and billing agreements as well as establishing an identity chain similar to how PGP's web of trust works. Anyone can have your public key, you just have to keep your private keys safe. Even if somehow you stupidly manage to screw this up, it's not that hard to start over. People lose social security cards now and they have to be re-issued. They just have to come up with the system for it and start doing it.
I like the idea better of making additional keypairs that have a chain of signatures back to your social security card so that you don't have to rely on it as much. It seems to me there's a lot of things that could be very workable as far as this is concern, but just to be clear I just like to use PGP as an analogy to a system that could work.