Multi-Party Trust

Credentials are one answer

Carol trusts information originally from Alice.

Implications:

  • Any level of trust needs credential presentation and receive ability.

Delegated Verification

Verify Access from another party

Implications

  • Requires common identifier (DID?) Between parties.
  • Simpler for Bob

Verify Access via approved token

Implications

  • This feels like a badly applied oauth flow.
  • Potentially simpler than credential verification?

conclusions - creds are best. multi-party messaging would be good, but isn't here yet. Going to some sort of token flow might work, but only in a constrained environment.

Select a repo