Email, Messaging, and SSI/DID (再放送)

by sylph01

Slide 1

Slide 1 text

Email, Messaging, and SSI/DID Ryo Kajiwara / sylph01 @ #idcon, 2020/11/19, ೔ຊޠ࠶์ૹ

Slide 2

Slide 2 text

஫ҙࣄ߲ • ͜Ε͸ͲͪΒ͔ͱ͍͏ͱҙݟද໌ͷΑ͏ͳੑ࣭ͷൃදͰ͢ • Ұ࣌ظͷQiitaͰ͍͏ͱ͜ΖͷʮϙΤϜʯ • ٞ࿦ͷͨΊͷΞΠσΞग़͠Λ͢Δੑ࣭ͷ΋ͷͰ͢ • ΑͬͯɺϓϩμΫτ΍։ൃ੒ՌͷσϞͰ͸͋Γ·ͤΜ • ·ͨɺٞ࿦΍લఏʹൈ͚΍݀͸༨༟Ͱଘࡏ͢Δ͸ͣͰ͢

Slide 3

Slide 3 text

No content

Slide 4

Slide 4 text

TL;DR

Slide 5

Slide 5 text

SMTPΛ ΍ΊΖ

Slide 6

Slide 6 text

Ͳ͏΍ͬͯ ΍ΊΔʁ

Slide 7

Slide 7 text

No content

Slide 8

Slide 8 text

ϝοηʔδϯάʹٻΊΔੑ࣭ • End-to-End҉߸Խ • ࠷֤ۙࠃ͕ban͠Α͏ͱ͍ͯ͠Δͬͯʁ • ҉߸Խ͞Εͨάϧʔϓϝοηʔδϯά • σʔλͷ੍ޚ • identityදݱͷ੍ޚ

Slide 9

Slide 9 text

Q: ͳΜͰLINE / Facebook Messenger / WhatsApp etc.͕͋Δͷ ʹϝʔϧͳΜ͔࢖ͬͯ Δͷʁ

Slide 10

Slide 10 text

Q: ͳΜͰLINE / Facebook Messenger / WhatsApp etc.͕͋Δͷ ʹϝʔϧͳΜ͔࢖ͬͯΔͷʁ • SMTP͸े෼ͳ҉߸Խ΍ೝূΛ͍࣋ͬͯͳ͍ • Eϝʔϧ͸௨ৗEnd-to-End҉߸ԽΛ͍࣋ͬͯͳ͍ • PGP΍S/MIMEΛ࢖ͬͨͱ͜ΖͰάϧʔϓʹର͢Δ҉߸Խί ϛϡχέʔγϣϯ͸Ͱ͖ͳ͍ • Eϝʔϧʹ͸spam͕͋Δ

Slide 11

Slide 11 text

Q: ͳΜͰLINE / Facebook Messenger / WhatsApp etc.͕͋Δͷ ʹϝʔϧͳΜ͔࢖ͬͯΔͷʁ A: ࣄલͷ৴པؔ܎ͷͳ͍ਓ͔Β΋ ϝοηʔδΛड͚औΔ͜ͱ͕Ͱ͖Δ

Slide 12

Slide 12 text

Eϝʔϧʹ͸spam͋Δ ͡ΌΜʂ

Slide 13

Slide 13 text

Eϝʔϧʹspam͕͋Δ ͷ͸ϓϩτίϧʹ૊Έ ࠐ·Εͨಗ໊ੑ͕ݪҼ

Slide 14

Slide 14 text

Eϝʔϧͷಗ໊ੑ ʮࣄલͷ৴པؔ܎ͷͳ͍ਓ͔ΒϝοηʔδΛड͚औΕΔʯͱ͍͏ ੑ࣭͸ి࿩ʹ΋͋ͯ͸·Δ͕ɺEϝʔϧʹ͸ి࿩໢ʹ͋ΔΑ͏ͳ anti-abuse mechanismΛ͍࣋ͬͯͳ͍ɻ͜Ε͸Eϝʔϧͷಗ໊ੑʹ ΑΔ΋ͷͰ͋Δɻ • ి࿩໢Λabuseͨ͠৔߹ٯ୳஌͕Մೳ • Eϝʔϧʹ͓͍ͯ͸identityͷspoofing͕༰қͰɺั·͑Δ͜ͱ͕ ࠔ೉ • ͱ͍͏͔Eϝʔϧʹ͸·ͱ΋ͳidentity layer͕ͳ͍

Slide 15

Slide 15 text

spammer͸Eϝʔϧͷ ಗ໊ੑΛ࢖ͬͯѱࣄΛ ಇ͘

Slide 16

Slide 16 text

ͦ΋ͦ΋ಗ໊ͷEϝʔϧɺཉ ͍͠ʁ ಗ໊ͷEϝʔϧ͸ߴ֬཰Ͱspamɻ ৽ͨʹ৴པؔ܎݁ͼ͍ͨ৔߹ಗ໊Ͱ͋Δ͜ͱʹ͍͍͜ͱ͸ͦΜͳ ʹͳ͍ɻ

Slide 17

Slide 17 text

͡Ό͋S/MIMEΛશҬత ʹ࢖͑͹͍͍ͷͰ͸ʁ

Slide 18

Slide 18 text

S/MIMEͷ໰୊ • ߴ͍ • ൃߦ͞Εͨ༻్ʹറΒΕΔ • ͋Δূ໌ॻ͸ಛఆͷorganizationʹ͓͚ΔॴଐΛূ໌ͯ͘͠Ε Δ͔΋͠Εͳ͍͕ • ΠϯλʔωοτͰৗʹͦͷಛఆͷ๧ࢠΛͣͬͱ͔Ϳ͍ͬͯͨ ͍͔ͱ͍͏ͱͦ͏Ͱ͸ͳ͍ • ෳ਺ͷূ໌ॻ࢖͑͹͍͍͡ΌΜʁ1ߦ໨ʹ໭Δ

Slide 19

Slide 19 text

΋ͬͱυϥεςΟοΫͳղ๏: ϚΠφϯόʔΧʔυͷ ূ໌ॻͰsign͞Εͨ ϝʔϧͳΒࣗಈతʹड ͚ೖΕΔ

Slide 20

Slide 20 text

୭΋ϚΠφϯόʔʹඥ ෇͍ͨΞΧ΢ϯτͰ spamͳΜ͔͠ͳ͍Ͱ ͠ΐʁ

Slide 21

Slide 21 text

·͋Θ͟Θ͟SSI/DIDͷ ࿩ฉ͖ʹདྷΔํͳΒ͜ ΕͷԿ͕ා͍͔͸Θ͔ Δͱࢥ͍·͕͢

Slide 22

Slide 22 text

No content

Slide 23

Slide 23 text

Eϝʔϧͷself-sovereignੑ SMTP/POP/IMAP͸΋ͱ΋ͱself-sovereignੑΛຬͨ͢ϓϩτίϧͰ ͋ͬͨɻࣗ෼ͰαʔόʔཱͯΔݶΓ͸ɻ • ࣗ෼ͰIDΛൃߦͰ͖Δ • ༻్ʹԠͯ͡IDΛ࢖͍෼͚Δ͜ͱ͕Ͱ͖Δ • ࣗ෼ͷσʔλͷίϯτϩʔϧ͸ࣗ෼Ͱ࣋ͭ͜ͱ͕Ͱ͖Δ

Slide 24

Slide 24 text

Eϝʔϧͷself-sovereignੑ ࠷ۙ͸୭΋ͦΜͳ͜ͱ͠ͳ͍ɻ • SMTP: ద੾ʹೝূ͢Δͷ͕೉͍͠ɻઃఆ1ݸͰ΋ؒҧ͑Δͱ spamͷ౿Έ୆ɻ • IMAP: ϚϧνσόΠεΞΫηεͳΒඞਢɻ͚ͩͲετϨʔδ؅ཧ ஍ࠈʹؕΔ ݁Ռɺຊདྷself-sovereignͰ͋Δ͸ͣͷϓϩτίϧͳͷ͕ͩɺதԝ ूݖԽΛڐͯ͠͠·ͬͨ

Slide 25

Slide 25 text

Eϝʔϧͷself-sovereignੑ EϝʔϧͷதԝूݖԽ͸spamͷ໰୊ΛΑΓѱԽ͍ͤͯ͞Δɻதԝ ूݖతEϝʔϧϓϩόΠμͷspamϑΟϧλͷಈ࡞ʹे෼ͳಁ໌ੑ͕ ͳ͘ɺѱҙͷͳ͍ϝʔϧͰ͢ΒspamϑΟϧλʹҿ·ΕΔɻதԝू ݖతEϝʔϧϓϩόΠμΛར༻͍ͯ͠ͳ͍ϝʔϧ͸spamϑΟϧλΛ ৴༻ͤ͞Δ͜ͱ͕೉͘͠ͳΓɺΑΓதԝूݖԽ͕ਐΉ ʢಁ໌ੑ͕͋ͬͨΒ͋ͬͨͰspamۀऀ͕ͦΕΛᷖճͯ͘͠ΔͷͰ Ϛζ͍ͱ͍͑͹ͦͷͱ͓Γ͕ͩ…ʣ

Slide 26

Slide 26 text

"Principles of User Sovereignty / Fundamental Problems of Distributed Systems" @ IIW30 ʮ෼ࢄγεςϜͷ๊͑Δࠜຊతͳ໰୊ΛղܾͰ͖ͳ͍ͱ͖ɺͦΕ ͸اۀʹΑΔதԝूݖԽ(corporate capture)ΛࣗΒڐͯ͠͠·͏ʯ Eϝʔϧ͸·͞ʹ͜ͷ࠷ͨΔྫͰ͋Δɻ෼ࢄγεςϜ๊͕͑Δຊ࣭ తͳ໰୊ʹରͯ͠े෼ͳղܾ͕ͳ͞Εͳ͔ͬͨͨΊɺاۀ͸ͦ͜ ʹϚωλΠζͷػձΛݟग़͠ɺதԝूݖԽͯ͠͠·ͬͨɻ

Slide 27

Slide 27 text

"Fundamental Problems of Distributed Systems" ྫ: • ϊʔυͷσΟεΧόϦʔ(Eϝʔϧͷ৔߹ૹ৴ઌͷ֬ఆʹඞཁ) • ϊʔυ͕ωοτϫʔΫʹࢀՃ͢Δࡍͷηογϣϯͷཱ֬ (introduction) • ϓϥΠόγʔ(௕ظతͳؔ࿈෇͚ͷ๧ࢠ) • τϥετ

Slide 28

Slide 28 text

Eϝʔϧ͕digital identityͷ֩ͱͳΔ ͜ͱͷා͍఺ ύεϫʔυ๨Εͨͱ͖ͷϦηοτ͸͍͍ͩͨEϝʔϧΛ௨ͯ͠ߦΘ Ε·͢Ͷʁ →Eϝʔϧ͕৐ͬऔΒΕΔͱ͋ͳͨͷΠϯλʔωοτ্ͷidentity ͸શͯ৐ͬऔΕ·͢ɻ secure messaging͕୅ସͰ͖Δ͔Ͳ͏͔͸͓͖ͯ͞ɺे෼ʹηΩϡ ΞͰͳ͍ϓϩτίϧ/ΤίγεςϜΛdigital identityͷ֩ͱ͢Δͷ͸ ةݥͰ͋Γɺ୅ସΛߟ͑Δඞཁ͕͋Δɻ

Slide 29

Slide 29 text

No content

Slide 30

Slide 30 text

Ͳ͏ͨ͠ΒղܾͰ͖ Δʁ

Slide 31

Slide 31 text

༧๷ઢ: ͜Εͬͯཁ͢ΔʹBetter PGPͷ࿩ͩΑͶʁ →஌ͬͯΔɻ

Slide 32

Slide 32 text

Verifiable CredentialΛ༻͍ͨEϝʔϧ ֤τϥϯβΫγϣϯʢ͜͜Ͱ͸Eϝʔϧͷ΍ΓͱΓʹ૬౰͢Δʣ͝ ͱʹҟͳΔidentityͷදݱΛ੾Γग़ͯ͠࢖͏ʹ͸Ͳ͏͢Ε͹Α͍ ͔ʁˠಛఆͷidentityͷදݱʹରԠ͢Δverifiable credentialΛ࢖͑͹ Α͍ spamϑΟϧλ͸Eϝʔϧʹؔ࿈͍ͮͨVCͷਖ਼౰ੑɾ৴པ౓Λ൑ఆ ͢Δ

Slide 33

Slide 33 text

Verifiable CredentialΛ༻͍ͨEϝʔϧ Կ͕خ͍͠ʁ • ૹ৴ऀ: ʢϝʔϧ͕ਖ਼౰ͳ༻్Ͱ͋ΔݶΓʣspamϑΟϧλʹ ͻ͔͔ͬΔ͜ͱ͕ݮΔ • ͍ͭͰʹɺৗʹެࣜͳ๧ࢠ͔Ϳͬͯͳͯ͘΋Α͍ • ड৴ऀ: spam͕ݮΔɺ·ͱ΋ͳϝʔϧ͕ड৴ശʹೖͬͯ͘Δ • ͪΌΜͱͨ͠ϓϩτίϧ֦ுΛ͢Ε͹ݱࡏͷSMTPͷΤίγες ϜͱڞଘͰ͖Δ

Slide 34

Slide 34 text

Messaging Layer Security https://messaginglayersecurity.rocks/ ηΩϡΞͰinteroperableͳάϧʔϓϝοηʔδϯάͷͨΊͷϓϩτ ίϧΛఆٛ͠Α͏ͱ͍ͯ͠ΔIETFͷWGɻ End-to-End҉߸ԽΛ࣋ͭʢͦΕ͸ͦ͏ʣɺ҉߸Խάϧʔϓϝο ηʔδϯά͕Մೳ ಛఆͷϓϥοτϑΥʔϜʹ͓͚ΔID͕ඞཁ

Slide 35

Slide 35 text

DIDComm Aries RFC 0005: DID Communication Ͱઆ໌͞Ε͍ͯΔDID Agentಉ࢜ ͷίϛϡχέʔγϣϯϝΧχζϜɻ DIDCommͱ͍͏ϓϩτίϧ͕͋Δɺͱ͍͏ΑΓ΋DIDCommͷ্ʹ ֤ΞϓϦέʔγϣϯ͝ͱͷϓϩτίϧΛ࣮૷͢Δɺͱ͍͏΄͏͕ ౰ͯ͸·ΔɻExplainerͰ͸˓×ήʔϜ༻ͷϓϩτίϧΛDIDCommͷ ্Ͱ࣮૷͍ͯ͠Δɻ

Slide 36

Slide 36 text

DIDComm ओͳಛ௃ͱͯ͠ɺʮඇಉظɺ୯ํ޲(simplex)ͷϝοηʔδϯάͰ͋ ΔʯʮτϥϯεϙʔτґଘੑΛ࣋ͨͳ͍(transport-agnostic)ʯ ʮEnd-to-end҉߸Խ͞Ε͍ͯΔʯͱ͍͏ੑ࣭͕͋Δɻ ૹΓઌͷൃݟ(discovery)͸DID RelationshipͷߏஙʹΑͬͯߦΘΕ Δɻ

Slide 37

Slide 37 text

No content

Slide 38

Slide 38 text

·ͱΊ • Eϝʔϧͷ໰୊ͱͯ͠ʮ҉߸Խ͕े෼Ͱͳ͍ʯ͜ͱʹՃ͑ͯʮ· ͱ΋ͳidentity layer͕ͳ͍ʯͱ͍͏໰୊͕͋Δ • identity layerͷߏஙΛதԝूݖԽ͞ΕͨEϝʔϧϓϩόΠμʹ· ͔ͤͯ͠·͏ͱEϝʔϧͷ಺ࡏతͳself-sovereignੑΛࣦͬͯ͠ ·͏ • DID΍VCٕज़ͰEϝʔϧͷidentity layerΛ࡞Δ͔ɺͦ΋ͦ΋DIDʹ ΑΔidentity layerΛ࣋ͭϓϩτίϧͰ͋ΔDIDCommʹ৐͔ͬͬ ͯ͠·͏ͷ͕Α͍ͷͰ͸ʁ