#dusk
I have been digging into dusk again, this time on the identity side, and ngl it's a bit different from what I expected.
last night I've seen just slap a KYC form in front of the app and call it a day your ID sits on some company's server, full stop. Dusk's Citadel does it backwards. You get a credential once, then every time a contract needs to check is this wallet over 18 or is this investor accredited you just prove yes/no with a zero knowledge proof. The actual document never leaves your device again.
Okay so here's the thing nobody's really talking about this only works if the issuer of that credential (bank, government, whoever) stays honest and doesn't get compromised. You've basically moved the trust problem from does the app leak my data to can I trust the one entity that signed off on me That's not nothing, but it's a smaller attack surface than what most chains are running right now.
I keep coming back to one question though what happens when that credential expires or the issuer revokes it mid transaction? Haven't found a clean answer for that yet.
$DUSK @Dusk
I have been digging into dusk again, this time on the identity side, and ngl it's a bit different from what I expected.
last night I've seen just slap a KYC form in front of the app and call it a day your ID sits on some company's server, full stop. Dusk's Citadel does it backwards. You get a credential once, then every time a contract needs to check is this wallet over 18 or is this investor accredited you just prove yes/no with a zero knowledge proof. The actual document never leaves your device again.
Okay so here's the thing nobody's really talking about this only works if the issuer of that credential (bank, government, whoever) stays honest and doesn't get compromised. You've basically moved the trust problem from does the app leak my data to can I trust the one entity that signed off on me That's not nothing, but it's a smaller attack surface than what most chains are running right now.
I keep coming back to one question though what happens when that credential expires or the issuer revokes it mid transaction? Haven't found a clean answer for that yet.
$DUSK @Dusk