Skip to main content

Launching the Cipheredtrust API blog

Today we're launching the blog for the Cipheredtrust API with the hope of putting a solution on the market that fully addresses the problem of identity verification on the internet.


Checkout the API here: https://www.cipheredtrust.com/

We'll have a lot more to say going forward. In the meantime feel free to post questions here or in the community forum.


Comments

Popular posts from this blog

How the FCC can prevent fake comments

The FCC is planning on making changes to its commenting system to deal with fake and abusive comments. Our digital certificate solution is tailor made for this type of problem. With this service, users can leverage their IRS tax transcript as a source of trusted identity information. The service is described in full: https://www.cipheredtrust.com/using-irs/ With the option to both use the API or just generate information certificates, tax payers can finally make valuable use of the trust associated with their transcript information. The certificate can facilitate both anonymous and positive ID verification. And it is currently free!!

Brace yourself for a very very fake internet

It is the start of a new year so like everyone else we have some input for what we think the future holds. For us, the future is Deep Fake . Imagine a future internet littered with AI generated photos of humans who've never existed, except maybe in the form of a doppelganger. If you thought people cat-fishing with decades old photos of themselves was bad, brace yourself for a future where every Instagram model is a certified 10+, without makeup! Imagine a future where the YouTube video you're watching of a funny attractive cooking show host is all fake, an AI generated amalgamation perhaps enriched by elements of the aura of the real human  puppeteer pulling the strings behind the curtain. In this future, everything would be fake, the attractive face, the attractive body, the attractive surroundings, the attractive voice,...ie, everything would be fake and since at this point we would be living a full blown inversion , you'll have no way to tell what is fake exce

Trust without Trust, beyond OAuth, OpenID, OpenID Connect...etc

Federated identity brokers (plenty in the market) generally require that the "relying party" and consequently the "principal"/user trust them with sensitive information. The implementation of federated login generally involves the service provider directing the user to select from a preset list of identity providers. Combining these modes of operation you end up with a situation where user privacy and security are both compromised, not a good look for what is meant to be a security solution. Beyond these immediate concerns, the actual specifications on which these identity broker services are based are generally more convoluted than they need to be. OAuth and OpenID are two of the more established standards, unfortunately these standards suffer from tunnel vision, ie they are so focused on the problem of user identity as it relates to login flows that they fail to consider simpler, better and more general approaches to solving the problem. User identity authenti