Chat thread with signed messages

检查有关密钥类型描述、测试、Solid Logic 密钥管理和文档的剩余检查清单项。先从 profile/keys/publicKey.ttl 和 settings/keys/privateKey.ttl 中现有的密钥位置开始，然后检查 issue 中引用的聊天签名和线程相关工作。完成的要求是解决剩余任务，并添加缺失的测试和文档。

Tasks :

• manage pod keys

  • ontologies
    • https://w3id.org/security : Proof, VerificationMethod, proofValue
    • http://www.w3.org/ns/auth/cert : PrivateKey, PublicKey, key (used for publicKey)
    • solid ontology shall replace cert ontology that do not cover privateKey :
      creation of 2 new terms privateKey and publicKey
  • create keys :
    Schnorr alg and secp256k1 elliptic curves ( key is 64 bytes length). more recent tan ECDSA on same elliptic curve and shorter keys
  • Keys URI location and content:
    • publicKey parentSettings/profile/keys/publicKey.ttl
      triple => :me solid:publicKey keyString # keystring is 64 char hex string
    • privateKey parentSettings/settings/keys/privateKey.ttl /settings/ is discovered from WebID preference file
      triple => :me solid:privateKey keyString # keystring is 64 char hex string
    • parentSetting is used for both Keys URI location
  • secure keys with READ only on key resources and acl:default Read on key container
  • repair publicKey keeping private key
  • add key type description ? SS256 + SHA256 ? where ? JWT or JWS ?
  • a WebID could have multiple key/keyPairs. Through using different key URIs

• chat logic

  • proof on default object message (id, date created, content, maker)
    replacedBy, deleted and threads are not included. These should link to new signed things
    This is not actually the case for deleted
  • add thread logic. Thread members property.

• chat channel

  • see https://github.com/SolidOS/chat-pane/pull/100
    • must be Append only for authenticated users
    • ReadWrite for chat creator (owner)
  • index.ttl : ReadWrite for authenticated agents and owner https://github.com/SolidOS/chat-pane/pull/102

• sign and verify object message. Cover Threads

  • simple message
  • edit message : replacedBy => sign new msg + verify same maker
  • deleted message => verify the triple with a second signature or create a new thing.
    and verify same maker. There is actually an optional parameter
  • links to new messages. Not needed

• UI

  • UI signed message with verify = false
  • UI for unsigned message
  • thread

• tests

• push key management in solid-logic ?

• documentation