Concordium / concordium-web3id

Tools for issuing, verification, and testing of Web3 ID
https://developer.concordium.software/en/mainnet/net/web3-id/index.html#web3-id
Mozilla Public License 2.0
2 stars 0 forks source link

Remove "Full Name" option from Concordia bot #141

Open erasmus opened 1 month ago

erasmus commented 1 month ago

Description Public reveal of full name seems excessive. Remove until clear benefit is established.

Change request:

  1. Change the option on the UI to "Successful ID verification (without revealing name) - Requires Concordium testnet identity and account" Screenshot 2024-05-16 at 10 34 23
  2. Change format!("\n- Real name: {full_name}")); to format!("\n- User has been verified with ConcordiumID")); https://github.com/Concordium/concordium-web3id/blob/main/examples/bots/discord-bot/src/main.rs#L106C41-L106C48
  3. Check other places that may require change
DOBEN commented 1 month ago

The Concordia bot showcases the web3ID capabilities as a demo application. It can be used to create social reputation by linking a social media account e.g "max_1234" with a real-world identity e.g. "Max Mustermann". This verification is done voluntarily by users.

The consequences of removing the real-world identity (full-name) verification are:

We should consider these consequences and have an alternative demo to showcase these capabilities before changing the demo.

ronnikc commented 1 month ago

The example case still works as its confirming the user on Telegram and Discord is the same user.

There is no need to disclose the full name in public, no one is using their full name on telegram or discord.

The use case was to show that you can prove that a person on Discord and Telegram is the same person and that proof is still valid even if you do not disclose the full name, you can still confirm that you have verified it in the proof without disclosing the information.

Indirect proofs utilizes the power of zero knowledge proofs and demonstrates them far stronger than an example of disclosing or revealing the persons full name, because then you are giving away knowledge in the proof instead of utilizing the zero knowledge proof.