Chat thread with signed messages

Examinez les éléments restants de la checklist concernant les descriptions des types de clés, les tests, la gestion des clés de Solid Logic et la documentation. Commencez par les emplacements de clés existants dans profile/keys/publicKey.ttl et settings/keys/privateKey.ttl, puis examinez le travail sur la signature des chats et les fils de discussion référencé dans l’issue. La tâche est considérée comme terminée lorsque les tâches restantes sont résolues et que les tests et la documentation manquants sont ajoutés.

Tasks :

• manage pod keys

  • ontologies
    • https://w3id.org/security : Proof, VerificationMethod, proofValue
    • http://www.w3.org/ns/auth/cert : PrivateKey, PublicKey, key (used for publicKey)
    • solid ontology shall replace cert ontology that do not cover privateKey :
      creation of 2 new terms privateKey and publicKey
  • create keys :
    Schnorr alg and secp256k1 elliptic curves ( key is 64 bytes length). more recent tan ECDSA on same elliptic curve and shorter keys
  • Keys URI location and content:
    • publicKey parentSettings/profile/keys/publicKey.ttl
      triple => :me solid:publicKey keyString # keystring is 64 char hex string
    • privateKey parentSettings/settings/keys/privateKey.ttl /settings/ is discovered from WebID preference file
      triple => :me solid:privateKey keyString # keystring is 64 char hex string
    • parentSetting is used for both Keys URI location
  • secure keys with READ only on key resources and acl:default Read on key container
  • repair publicKey keeping private key
  • add key type description ? SS256 + SHA256 ? where ? JWT or JWS ?
  • a WebID could have multiple key/keyPairs. Through using different key URIs

• chat logic

  • proof on default object message (id, date created, content, maker)
    replacedBy, deleted and threads are not included. These should link to new signed things
    This is not actually the case for deleted
  • add thread logic. Thread members property.

• chat channel

  • see https://github.com/SolidOS/chat-pane/pull/100
    • must be Append only for authenticated users
    • ReadWrite for chat creator (owner)
  • index.ttl : ReadWrite for authenticated agents and owner https://github.com/SolidOS/chat-pane/pull/102

• sign and verify object message. Cover Threads

  • simple message
  • edit message : replacedBy => sign new msg + verify same maker
  • deleted message => verify the triple with a second signature or create a new thing.
    and verify same maker. There is actually an optional parameter
  • links to new messages. Not needed

• UI

  • UI signed message with verify = false
  • UI for unsigned message
  • thread

• tests

• push key management in solid-logic ?

• documentation