Remix.run Logo
▲ roddylindsay 2 hours ago

It's not so simple:

- If by certifying authority you mean a CA/Trust Service Provider, they don't generally publish client information in a central location.

- If you mean the actual jurisdictional authority, there are thousands and public records are all over the place.

- Websites aren't generally part of corporate filing records. So the agent would still need a way to connect the website to the corporation even after checking the legitimacy of the corporation.

- Serving the structured info in an HTTP header that is cryptographically verifiable by the browser itself (via its trusted roots) essentially serves as a distributed database for website identity, which eliminates the need for each agent to come up with its own ad-hoc verification system on the fly (and all the additional fetches that come along with it)

▲ameliaquining 2 hours ago | parent [-]

Can you give a concrete example of the kind of claim you think QWACs would be useful for verifying, that can't be addressed just as well with existing protocols?

▲roddylindsay an hour ago | parent | next [-]

Sure:

- which business is behind the website?

- when was said business incorporated?

- how many employees does this business have?

- what is the jurisdiction and canonical registration identifier of this business?

All useful info for an agent determining how much to trust the content on a website and whether to transact with it

▲xorcist 36 minutes ago | parent | prev [-]

Easier than ever. Should I really log in with my Microsoft credentials to auth.gfx.ms?