New Ethereum talks, every Monday. The week's conference uploads by event, in your inbox.

Loading player…

Ethereum Foundation 🛠️ Make Data Portable with TLSNotary

ETHGlobalMon, Oct 9, 2023, 12:00 AM

Join us for workshop titled "Make Data Portable with TLSNotary". Hack with some of the most skilled web3 developers, designers and product builders from all around the globe for a weekend-long adventure to advance the Ethereum ecosystem, ETHGlobal New York 2023. ----------------- Follow us: https://twitter.com/ETHGlobal​ Check us out: https://ethglobal.co​m Email us at: hello@ethglobal.com

Transcript

foreign [Music] from the privacy and scaling exploration Lab at the ethereum foundation I want to present you the advantages of integrating TLS notary into your hackathon projects and the transformative potential it holds we the TLs notary team are building TLS notary to make private data on web servers portable this data portability empowers usage to control how they use their data ensuring it remains trustworthy for third-party applications in the next few minutes I'll explain to you why we're building TLS Note 3 in more detail I will give you a high level overview on how it works and I'll end with a few possible ideas of what you can build with it I assume all of us know that modern web servers use TLS which stands for transport layer security TLS ensures that the user lets use Alice as an example receives data directly from the server untempered Alice can trust that the data is authentic however when Alice wants to share this data with Bob TLS does not help because of the way TLS Works Bob can't be sure if Alice changed something to the data after she received it this is where TLS Note 3 steps in TLS Note 3 provides a secure privacy-centric method for data to get that seal of approval from a reliable note read this enables seamless data sharing with third partings TLS Note 3 works by adding a notary to the TLs connection using multi-party computation or MPC for short before we go further let me clarify TLS Note 3 is not some man in the middle scheme no instead Alice and the Note 3 each have their key share and need to cooperate correctly to execute the TLs communication NPC enables this collaborative computation without revealing private information from Alice this means the Note 3 can verify the data's authenticity while only seeing encrypted bits and for the server business as usual the server can't tell that the data request they receive is being notarized one more thing you really love about DLS Note 3 is that it allows for Selective disclosure this means that Alice can redact the notorious data she gets to pick and choose which parts of the data to unveil to Bob selective disclosure can be further augmented with your knowledge proofs of the redacted parts for example rather than exposing your exact address you could add a zero Notch proof that you do not live in the U.S or you could simply confirm your over 18 instead of exposing your exact birth date a brief word on trust assumptions the server is unaware of the notarization so no trust assumptions there and TLS notary is open source so Alice the user can check that the cryptographic algorithms were implemented correctly so her data is handled securely and no information is leaked to the note 3. only the unredacted data is shared with Bob if Bob the verifier trusts the notary the data he receives from Alice can be trusted too Bob can tell Alice which note 3C trusts and Bob can also demand that Alice provides Bruce from multiple notaries to increase certainty Bob can also run the notary himself eliminating any trim's assumptions at all technically speaking TLS Note 3 is a Rest Library that can be used natively on most platforms a webassembly version is also forthcoming for browser integration likewise the verifier operates natively or via webassembly in JavaScript the notary server got easily renate to the order in the docker container now let's stir that creative bot here are some potential use cases as a first example imagine a distributed web application where users can Post Independent reviews for products they bought in online stores like Amazon or AliExpress with TLS Note 3 users can provide this web application with the proof that they purchase this product without revealing any other private information other users of the application can consult the reviews knowing the review was posted by real product owners a next example we nicknamed diet DM discloser this is a hypothetical web application that allows users to upload private messages topics could include I received incriminating messages from the crypto villain of the day or I received unwanted private part pictures or anything else you would like to brag about or bring to light TLS Note 3 proves the data is authentic the third example is using TLS notary to prove censorship recently there was a whole debacle around Reddit and multiple accounts were suspended with TLS Note 3 one can verifiably share the message received with the reason for your suspension you could also build a web application for users to prove they were blocked from using an application and report if other users are experiencing the same you can also use TLS notary to prove various kinds of account information imagine you have some crypto coins on a centralized exchange how can you prove ownership of your assets when the exchange suddenly disappears you could also use TLS notary to improve to import your web2 reputation and use that to gain access to Anonymous chat rooms for example user game achievements on Steam to unlock access to Anonymous chats with other proven Advanced players or prove that you have the marathon batch on Garmin or Strava to allow access to a chat about sensitive Marathon topics another ID is a poet dispenser you could use TLS notary to dispense poets based on private data for example create a tool to prove participate participation at e-global New York or any other events and reward an ispo app and of course we're also very open to tools that jazz ftls notary a generic proof visualizer would really help other projects exploring the use of TLS note 3. this it could include visualizing redacted Parts in the data or displaying certificate information and showing the notary signature tools to help with reduction are also an active area of usability exploration the short remark about public data while TLS notary can notarize public data for public data it's currently better to look at existing Oracle Solutions TLS Note 3 is best suited for an authorizing private information for more information visit our website tlsnotree.org this page also links to GitHub repositories and our documentation website the TLs notary team will be live at the venue so make sure to visit our boot we look forward to hearing your ideas and questions I trust you now see what TLS notaries data portability enables and I hope that I sparked your imagination to invent and build new applications that make an impact wishing you all the best for the hackathon let's make it memorable

Automatic transcript — names and jargon may be misspelled.