ion VS forgefed

- For completeness and good scientific practice, also look at solutions beyond Ethereum: https://identity.foundation/ion/

ION decentralized identity (an implementation of the SideTree protocol)

Other uses are extremely limited IMO. Microsoft ION, an implementation of decentralised identity w3c spec, for example. It makes a Bitcoin transaction containing a hash that refers to several identities. Since the identities are mutable there does not seem much value in remembering the hash at a point in time.

I agree the website is very bad, currently. Maybe this page has better resources:

https://essif-lab.github.io/framework/docs/ssi-standards

But there's quite a lot going on... the work on SSI is being coordinated by the W3C Working Group on VCs (Verifiable Credentials) and DIDs (Decentralized Identifiers).

https://www.w3.org/community/credentials/

https://www.w3.org/2019/did-wg/

I don't know of any real-world usage yet, despite the fact that the specifications required for things to work and be used by real people already exist, and that there's a lot of DID methods (over 80 last I checked) registered, but as people have noted, most are based on blockchain (but not all... there's stuff like the peer, git, jwk DID methods that do not require blockchain)... but I have to say that, in this particular instance, blockchains may actually be a proper solution for a real problem (that of looking up public keys and metadata for entities/users in a distributed, highly-reliable manner).

https://www.w3.org/TR/did-spec-registries/#did-methods

If you want to look for related stuff, look for things that users would need to have to use SSI, like DID wallets... Some random examples I found by quickly searching:

https://www.abtwallet.io/en/

https://www.didwallet.io/

https://igrant.io/

https://www.dock.io/dock-wallet-app

https://identity.foundation/ion/

The OpenID Connect Standard is being extended to support self-issued OIDC (SIOP) which allows OIDC to interact with SSI constructs:

https://openid.net/specs/openid-connect-self-issued-v2-1_0.h...

So, yeah, there's a lot of stuff being created around SSI, but admitedly, almost nothing practical yet... Hence why I was hoping to find something where this work could be very helpful, like logging into Codeberg :)

I would also recommend checking ION¹. I have tested a few DID Methods including Sovrin, Veres One, and ION, and the latter is the most spec-adherent and well-implemented, apart from receiving funding from companies like Microsoft and TBD (which is proposing web5 in the first place). And yes, it is the only DID Method to receive support from big tech (was incubated within Microsoft, then donated to the Decentralized Identity Foundation), and it also happens to be a technically good solution.

¹ https://identity.foundation/ion/

Microsoft ION --->https://identity.foundation/ion/

Doing some more research: Looks like the idea is developed by tbd.website and uses a L2 tool called ION that utilizes the SideTree protocol. Interestingly, ION does not introduce a new token which I find interesting, and one of the things I've found confusing about Stacks.

If you don't mind me asking since you're here: will you be implementing ForgeFed in Gitness [0]? My sense is that federation is our best hope for breaking GitHub's network effects, and I'd love to see more projects like yours join the protocol.

[0] https://forgefed.org/

From the comments, Forgejo is also already working on implementing ForgeFed, an ActivityPub extension specifically designed for software forges [0]. Judging from the issue, it looks like they're well on their way [1].

I have to say, I'm not super into the idea of social media, but this is a use for federation I approve of wholeheartedly. The friction of having to create accounts on X forges (where X is the number of projects that self-host GitLab) is a huge moat for GitHub, and federation could solve that very handily and create an environment where FOSS projects can feasibly host their own code away from Microsoft's control without horribly inconveniencing everyone who wants to participate.

[0] https://forgefed.org/

[1] https://codeberg.org/forgejo/forgejo/issues/59

> I agree that e-mail is not perfect, but... how is GitHub better?

Please look at my comment again. I prefer email to locked in forges.

> Devs like new shiny toys, and e-mails are old technology

There is one aspect where such forges have an advantage over email - a better user experience. Aerc and the likes all good - but Github and others provide a good user experience over a tool that everyone uses - the web browser.

> we should have something better than e-mail in 2023

We really should have something better than email. I'm saying this as someone who operates a personal mail server and a bunch of desktop services for it. It's really hard to get the setup correct.

In that context, it's worth looking at forgefed (https://forgefed.org/). It's a protocol for federating forges like Gitea and Gitlab. It's built on top of ActivityPub - which behaves a bit like email (it has inboxes and outboxes for every user). From the spec, it seems like pull requests happen by sending patches to the destination forge.

> Nobody takes the time to try the e-mail workflow (even though it's really two git commands)

Email workflow seems simple. But there are two things that make it complicated:

1. The patches don't specify the commits they apply to. It's simply assumed that they apply to the head of the main branch. The commits have to be carefully rebased on the main branch before sending the patches. It could otherwise lead to conflicts and a lot of wasted time.

2. Each commit/patch is send as a single email. Developers usually make frequent commits when they develop. Such patches can be confusing and hellish to review. A sane patchset requires the developers to edit the commit history, usually using interactive rebases. Each commit should contain a single feature and shouldn't break the build.

I consider both the above to be good development practices and follow them even on my personal projects. However, this is an additional barrier to entry. In fact, this may be a bigger problem for many than setting up git for email.

Another interesting topic to look into is forge federation. Forgejo [0], the code forge on which Codeberg is based is one forge software that intends to federate their repositories between server instances over the network using ActivityPub protocol extensions such as ForgeFed [1] and F3 [2] specifications.

[0] https://forgejo.org

[1] https://forgefed.org

[2] https://lab.forgefriends.org/friendlyforgeformat

> If you want to look into people who disagree with you: https://forgefed.org/