the finger protocol is back!
by Johann Barbie
at bitfinger.org
What is Finger?
● RFC 742 (December 1977)
● human-oriented status and user information
● <<finger user@server.org>>
Login ...
What is WebFinger?
Personal Web Discovery on Email (RFC 7033):
1. Start with an email address: pithy.example@gmail.com
2. ...
What is WebFist?
● fallback when providers don't support WebFinger
● makes use of DKIM signatures
● send email to webfist ...
What is Webfist?
●
●

Start with an email address: pithy.example@gmail.com
Translate it into a URL: http://gmail.com/.well...
What is Fist Bump?
● Receive a verification email, verify its DKIM signature
● Use the email address to very slowly genera...
Using Fist Bump
{ "subject": "acct:makingabetter@gmail.com",
"links":[{
"rel": "bitcoin",
"href": "bitcoin:19xeDDxhahx4f32...
Demo
demo time
Finish
Thank you!
@johba
37coins.com
bitfinger.org
Content for this presentation from Brett Slatkin’s blog: http://www.one...
Upcoming SlideShare
Loading in …5
×

Bitfinger - Bitcoin on Webfinger, Webfist and Fist-Bump

1,950
-1

Published on

proposal for a distributed registry of bitcoin payment information by email address.

Published in: Technology, Business
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
1,950
On Slideshare
0
From Embeds
0
Number of Embeds
0
Actions
Shares
0
Downloads
2
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Bitfinger - Bitcoin on Webfinger, Webfist and Fist-Bump

  1. 1. the finger protocol is back! by Johann Barbie at bitfinger.org
  2. 2. What is Finger? ● RFC 742 (December 1977) ● human-oriented status and user information ● <<finger user@server.org>> Login Name: johba In real Life: Johann Barbie Shell: /bin/bash No unread mail
  3. 3. What is WebFinger? Personal Web Discovery on Email (RFC 7033): 1. Start with an email address: pithy.example@gmail.com 2. Translate it into a URL: https://gmail.com/.well-known/webfinger?resource=acct:pithy.example@gmail.com 3. Fetch that URL and get back JSON: {"subject": "acct:pithy.example@gmail.com", "links":[{ "rel": "avatar", "type": "image/jpeg", "href": "http://www.example.com/~myname/profile.jpg"} ]} 4. Problem: domain name participation
  4. 4. What is WebFist? ● fallback when providers don't support WebFinger ● makes use of DKIM signatures ● send email to webfist server: webfist = http://example.com/path/to/your-profile ● restult: { "subject": "pithy.example@gmail.com", "links": [{ "rel": "http://webfist.org/spec/rel", "href": "http://example.com/my-delegation-here.json", "properties": { "http://webfist.org/spec/proof": "http://webfist.org/webfist/proof/08e01fb3123de74555528daaeb2d33b513f50f88c255b91b02617c067df89a3809f0e17197b52413?decrypt=pithy.example%40gmail.com" }}]}
  5. 5. What is Webfist? ● ● Start with an email address: pithy.example@gmail.com Translate it into a URL: http://gmail.com/.well-known/webfinger? resource=acct:pithy.example@gmail.com ● Fetch that URL and receive a bad response ● Formulate a WebFist URL: http://webfist.org/.well-known/webfinger? resource=acct:pithy.example@gmail.com ● Fetch the WebFist URL and get back JSON ● Follow the delegation path and fetch the real service document
  6. 6. What is Fist Bump? ● Receive a verification email, verify its DKIM signature ● Use the email address to very slowly generate an AES encryption key with scrypt; the email address is the password ● AES128 encrypt the email using the generated key ● Save the email to storage, identified by "[scrypt(password)][hash(encrypted-email)]" ● Publish the list of recently encrypted blobs ● Find and share encrypted blobs with peer servers
  7. 7. Using Fist Bump { "subject": "acct:makingabetter@gmail.com", "links":[{ "rel": "bitcoin", "href": "bitcoin:19xeDDxhahx4f32WtBbPwFMWBq28rrYVoh" }] ● enable CORS headers ● saved at: https://bitfinger.org.s3.amazonaws.com/songelee.json ● send email with content: webfist = https://bitfinger.org.s3.amazonaws.com/songelee.json
  8. 8. Demo demo time
  9. 9. Finish Thank you! @johba 37coins.com bitfinger.org Content for this presentation from Brett Slatkin’s blog: http://www.onebigfluke. com/2013/06/bootstrapping-webfinger-with-webfist.html
  1. A particular slide catching your eye?

    Clipping is a handy way to collect important slides you want to go back to later.

×