End-to-End Encryption (E2EE)

[jeswr]

This issue proposes a new specification work item on end to end encryption. The features of this specification should provide a way for client applications to encrypt documents, and share secrets with one another so that user/client application pairs can decrypt documents iff they have access to read a document.

This specification item is being raised following discussions with @niko-ng at the Solid Symposium -- as NextGraph implements a similar solution. @niko-ng you indicated that you have someone who can drive the development of a specification document and example implementations. Could you please identify who that is, their capacity, and whether any support is required for them to deliver a specification item.

[uvdsl]

Hi, this is indeed an interesting issue worth exploring! 🙂 I am curious about the discussion and how this conversation will consider past discussions on this topic, which I vaguely recall happening before over various channels.

Just some polite housekeeping: As there is no concrete proposal or draft associated with issue, I'll go ahead an rename this issue to just "E2EE". When the time is right and something tangible is being proposed as a new work item, then - depending on how wild the discussion goes under this issue - a clean new issue should be created to introduce the particular proposal referencing the prior discussion in this issue here as its history.

Cheers!

[niko-ng]

Hi @jeswr, indeed I will be happy to help kickstart a discussion (or resume a discussion) on E2EE for Solid/RDF data.
We did have a matrix chatroom opened by Pavlik more than a year ago, which is inactive at the moment.
And as I said during the Symposium, I think E2EE is important for all data in a POD, not only the chat messages.
We could start by a general discussion on the challenges, and if a specification or more detailed technical discussion follows, I could probably ask a coworker to dedicate some time.
@thhck already invited me to next week's CG meeting and said E2EE would be part of the agenda, in the second half hour.

[melvincarvalho]

FYI: JSS implements E2EE via did:nostr + NIP-44/04 today. JSS has ~10 public + ~10 local deployments, with NIP-98 at 100+ implementations across the broader Nostr ecosystem. Pattern documented at JavaScriptSolidServer/JavaScriptSolidServer#365

Edit: JSS E2EE Docs Page

[elf-pavlik]

Social Web CG had E2EE task force meeting on May 5th https://www.w3.org/events/meetings/880d67b5-892e-4191-ba9d-e87d659269cd/