What is this ?
This KeeeX service allows you for generating anonymous identities. Such an identity can be used when registering for a compatible web site or service, then login in or interacting with it. It involves a public and a private key. The private key will always remain on your side. The public key is meant to be transmistted and inserted in data and will notably be used for keeexing documents and electronic signatures.
By using such an identity, you will enable a web site to trust that recurrent interactions and consents indeed emanate from you alone, although nobody on their side can know more than what you explicitly share, and nobody either can fake your activity.
The mechanism is simple :
- once generated, you are invited to save your identity file in a safe place on your computer (of course, it's not our business, but you are strongly encouraged to use disk encryption or better)
- the identity file can be "uploaded" on a compatible web site. In fact it is not really uploaded, as the private key remains at all times on your side and is never transmitted. One reason for websites to use this method is that they want to be able to provably show that they absolutely know nothing about you and are also willing to prove that they cannot, under any circumpstance, fake your activity. In case you don't trust them, you may ask someone to review the source code from their web pages. Of course again, beware of phishing attempts.
- the public key can be transmitted to the web site when you are asked to sign some data (for instance you sign your consent to participate in a study)
- then a unique identifier of your consent or any data pertaining to your relationship with the web site is sent back to you, and you are prompted for signing using your locally preserved private key.
Identities can be published and revoked on the Bitcoin blockchain. You might want to revoke an identity if you expose its file, or because you discovered that a phishing attemp stole your credentials. The web sites using keeex identities shall verify the validity of identities before using them.