Hacker News new | ask | show | jobs
by noman-land 1665 days ago
It solves a few problems as mentioned below.

Every single form of your identity right now is mediated by a third party.

Your email. Your Instagram. Your Twitter. Your phone number. Your bank account.

Not only that, but each one is independent of the other. That's 5 different accounts with 5 different providers. Each of them has a vast infrastructure and duplicate copy of everything about you and everything about everything else. Each one of them has an off switch to your identity that they can freely flip on a whim with no recourse available to you.

If you invert that and say that your identity is no longer mediated by any specific entity, or array of entities, it is mediated by a provably neutral public infrastructure that is completely opt in and costs only the amount that is proportional to your usage.

Now the identity resides with the user, not any third party, which means they have full control over it, without having to rely on any one entity that can fail or turn against you.

3 comments

> Your email. Your Instagram. Your Twitter. Your phone number. Your bank account.

These are identifiers, backed by accounts with credentials.

> If you invert that and say that your identity is no longer mediated by any specific entity, or array of entities, it is mediated by a provably neutral public infrastructure that is completely opt in and costs only the amount that is proportional to your usage.

What value does this have for your email provider? Instagram or Twitter? The phone company? The bank?

All of these companies provide value _through_ the identifier. Checking accounts and Credit cards issued by the bank. The phone number. Your handle on Instagram or Twitter.

Many of these need to have an idea of a real-world identity for regulatory reasons. For account recovery actions. For effective enforcement of abuse bans.

What about this off switch? Even if I show up with my own identifier - twitter can still refuse to post my messages. My bank could block access to my funds.

This vision seems to be able replacing these businesses with new businesses and new infrastructure.

So in this brave new world, if someone manages to steal a single piece of my data (my private key) then they can have unfettered access to my phone, bank, email and social media accounts? And none of those services have a customer support team who can restore my access and reverse the fraudulent transactions that were made in my name?
Your first sentence greatly exaggerates the content that follows. I don't see any actual problems with the latter.

I do see more problems with the "solutions" actually.

¯\_(ツ)_/¯