Chat thread with signed messages

Tasks :

• manage pod keys

  • ontologies
    • https://w3id.org/security : Proof, VerificationMethod, proofValue
    • http://www.w3.org/ns/auth/cert : PrivateKey, PublicKey, key (used for publicKey)
    • solid ontology shall replace cert ontology that do not cover privateKey :
      creation of 2 new terms privateKey and publicKey
  • create keys :
    Schnorr alg and secp256k1 elliptic curves ( key is 64 bytes length). more recent tan ECDSA on same elliptic curve and shorter keys
  • Keys URI location and content:
    • publicKey parentSettings/profile/keys/publicKey.ttl
      triple => :me solid:publicKey keyString # keystring is 64 char hex string
    • privateKey parentSettings/settings/keys/privateKey.ttl /settings/ is discovered from WebID preference file
      triple => :me solid:privateKey keyString # keystring is 64 char hex string
    • parentSetting is used for both Keys URI location
  • secure keys with READ only on key resources and acl:default Read on key container
  • repair publicKey keeping private key
  • add key type description ? SS256 + SHA256 ? where ? JWT or JWS ?
  • a WebID could have multiple key/keyPairs. Through using different key URIs

• chat logic

  • proof on default object message (id, date created, content, maker)
    replacedBy, deleted and threads are not included. These should link to new signed things
    This is not actually the case for deleted
  • add thread logic. Thread members property.

• chat channel

  • see https://github.com/SolidOS/chat-pane/pull/100
    • must be Append only for authenticated users
    • ReadWrite for chat creator (owner)
  • index.ttl : ReadWrite for authenticated agents and owner https://github.com/SolidOS/chat-pane/pull/102

• sign and verify object message. Cover Threads

  • simple message
  • edit message : replacedBy => sign new msg + verify same maker
  • deleted message => verify the triple with a second signature or create a new thing.
    and verify same maker. There is actually an optional parameter
  • links to new messages. Not needed

• UI

  • UI signed message with verify = false
  • UI for unsigned message
  • thread

• tests

• push key management in solid-logic ?

• documentation

Esamina gli elementi rimanenti della checklist per le descrizioni dei tipi di chiavi, i test, la gestione delle chiavi di Solid Logic e la documentazione. Inizia dalle posizioni delle chiavi esistenti in profile/keys/publicKey.ttl e settings/keys/privateKey.ttl, quindi esamina il lavoro sulla firma delle chat e sui thread a cui si fa riferimento nell’issue. L’attività è completata quando vengono risolte le attività rimanenti e vengono aggiunti i test e la documentazione mancanti.