Chat thread with signed messages

キータイプの説明、テスト、Solid Logic キー管理、ドキュメントに関する残りのチェックリスト項目を確認します。まず profile/keys/publicKey.ttl と settings/keys/privateKey.ttl にある既存のキーの場所を確認し、その後、issue で参照されているチャットの署名とスレッドに関する作業を調査します。残りのタスクを解決し、不足しているテストとドキュメントを追加すれば完了です。

Tasks :

• manage pod keys

  • ontologies
    • https://w3id.org/security : Proof, VerificationMethod, proofValue
    • http://www.w3.org/ns/auth/cert : PrivateKey, PublicKey, key (used for publicKey)
    • solid ontology shall replace cert ontology that do not cover privateKey :
      creation of 2 new terms privateKey and publicKey
  • create keys :
    Schnorr alg and secp256k1 elliptic curves ( key is 64 bytes length). more recent tan ECDSA on same elliptic curve and shorter keys
  • Keys URI location and content:
    • publicKey parentSettings/profile/keys/publicKey.ttl
      triple => :me solid:publicKey keyString # keystring is 64 char hex string
    • privateKey parentSettings/settings/keys/privateKey.ttl /settings/ is discovered from WebID preference file
      triple => :me solid:privateKey keyString # keystring is 64 char hex string
    • parentSetting is used for both Keys URI location
  • secure keys with READ only on key resources and acl:default Read on key container
  • repair publicKey keeping private key
  • add key type description ? SS256 + SHA256 ? where ? JWT or JWS ?
  • a WebID could have multiple key/keyPairs. Through using different key URIs

• chat logic

  • proof on default object message (id, date created, content, maker)
    replacedBy, deleted and threads are not included. These should link to new signed things
    This is not actually the case for deleted
  • add thread logic. Thread members property.

• chat channel

  • see https://github.com/SolidOS/chat-pane/pull/100
    • must be Append only for authenticated users
    • ReadWrite for chat creator (owner)
  • index.ttl : ReadWrite for authenticated agents and owner https://github.com/SolidOS/chat-pane/pull/102

• sign and verify object message. Cover Threads

  • simple message
  • edit message : replacedBy => sign new msg + verify same maker
  • deleted message => verify the triple with a second signature or create a new thing.
    and verify same maker. There is actually an optional parameter
  • links to new messages. Not needed

• UI

  • UI signed message with verify = false
  • UI for unsigned message
  • thread

• tests

• push key management in solid-logic ?

• documentation