Conversation

1/ Sign-In with Ethereum

is the first step to Unbundle The Login. Today, identity providers such as Google, Facebook, or Apple manage the entire login experience, but so much more can be unlocked by unbundling: user control, data sharing, and faster innovation.

4:33 PM · Apr 13, 2022Twitter Web App

Replying to

and

2/ A single organization should not have the sole discretion as to what kinds of data sharing are supported for billions of people, especially if they have interests competing with those of their users.

wyc.eth

@wycdd

Apr 13

3/ The user and the accessed service should be the only parties who need to agree on what data are shared and how to share them. Unbundling the Login gets us there by allowing the user to assemble their own end-to-end login experience without an intermediary.

wyc.eth

@wycdd

Apr 13

4/ We break down the login into its core components, starting with extensible key-based authentication. Then it’s built back up, allowing us to surpass the state of the art by creating open interfaces and therefore opportunities for innovations along each part of the stack.

wyc.eth

@wycdd

Apr 13

5/ To get there, the easiest path is for end users to use private keys. With blockchains as the most successful key adoption event ever, we can evolve their use past just on-chain transactions to explore an entire universe of key-controlled interactions.

blog.spruceid.com

Why Sign-In with Ethereum is a Game-Changer - Part 1

Sign-In with Ethereum is a game-changer for user choice on the Internet. Instead of submitting to "Big Login," users can now login using the same keys controlling their blockchain accounts--without...

wyc.eth

@wycdd

Apr 13

6/ We start with the login and

@signinwitheth

. Then, with additional innovations such as session keys, capability permission models, and privacy enhancements, we can unlock the rest of the use cases while returning control back to the user.

blog.spruceid.com

From Sign-In with Ethereum to Session Keys

Session keys let users root all their digital interactions to their keys.

wyc.eth

@wycdd

Apr 13

7/ We can move from users logging into platforms to platforms logging into users’ data vaults.

Replying to

and

How does account recovery work with

@signinwitheth

? What happens when a user forgets or loses their seed phrase or hardware token?

Replying to

and

SIWE abstracts over wallets, so it’s however the wallet decides to handle it, whether it’s multisigs, smart contract wallets, social recovery, trusted custodians, etc. Key recovery has come a long way due to wallet/exchange security advancements!

Show replies

Replying to

and

We need to separate the wallet from identity and any other digital asset you want to share with the public. As a first step, it could be a code clone of a wallet with a different metaphor. It would lead to similar functionality but hacker safe restrictions.

Replying to

I should also state, I don't think a "vault" is the correct metaphor, I wouldn't want to share access to my real life vault to prove my identity. Another contradiction is making off chain data at the core of web3 identity, it's just a restart & ultimately a replay of web2 ID