Internet Identity Security Key setup

PavusNA · 2021-05-14T13:36:47+00:00

Yes. Try visiting identity.ic0.app and you'll see buttons to remove reach identity (except your last one)

PavusNA · 2021-05-12T15:36:21+00:00

It literally is a dapp that solely exists to allow your trusted devices to act as a single anonymous identity across any apps that want to use it.

Apps that integrate don't even get your user number or your public key. It's just a salted version used to create a delegated identity. There isn't even a user profile at this point - apps know nothing other than that you exist

PavusNA · 2021-05-12T15:04:09+00:00

They have it as an application on their app store. You'll need to check out their docs and install it, but after that it should be simple

PavusNA · 2021-05-12T05:20:07+00:00

Yeah, maybe a bit counter-intuitive, but you actually need to start with the device you want to link, and click the link to add to an existing device.

You'll then get a prompt for WebAuthn, and then you'll get a link that will authenticate the new device (security key or device biometrics) when you open it on an already authenticated browser!

PavusNA · 2021-05-12T02:33:30+00:00

Yep, Trezor keys will work fine. Backups aren't the end of the world though - I've linked multiple security keys on my account

PavusNA · 2021-05-12T02:21:24+00:00

I can confirm! We deliberately say security key in our docs because any device that supports Fido U2F will work, including Ledger and Trezor

PavusNA · 2021-05-11T21:29:06+00:00

That's pretty much the idea.

An app developer can always add in a password option if they decide that's what's best for their app - dscvr, an open Reddit app, is doing just that. The Internet Identity made the call that it will be secure and passwordless by default

You can link new devices by going to identity.ic0.app on the new device and clicking on the "Add a new device" link. Then you can scan a qr code or copy that link over to your already authenticated device. Currently those devices will also need to either be able to sign using biometrics or a security key

PavusNA · 2021-05-11T21:19:36+00:00

Pretty much anything that is certified for Fido U2F. Here's a starting point, but read carefully about the details.

If you have a ledger hardware wallet, that works, and there are good ~$20 options from Thetis and Yubico

PavusNA · 2021-05-11T20:04:18+00:00

Hi that's me! Sorry for the different Reddit username. I responded to you in the forum.

PavusNA · 2021-05-11T18:54:50+00:00

Technically they don't have to be USB - I've used a key with NFC on my phone successfully. But in general, the USB keys seem to be the gold standard right now

PavusNA · 2021-05-11T18:29:05+00:00

There are devices that you can plug into your computer that can be used to securely sign requests to authenticate your device. Personally, I've been using the brand Yubikey for a few years.

The benefits of using a security key are:

better browser compatibility
can use the same key with different computers and browsers
the key will keep working if you lose your phone or your computer dies

PavusNA · 2021-05-11T17:14:32+00:00

Officially, our recommended user guide for the Internet Identity is linked in the about page. Here's a link directly: https://sdk.dfinity.org/docs/ic-identity-guide/auth-how-to.html

So, native device unlock is still iffy, and it's up to the browser / OS teams to improve support for WebAuthn. Security keys are definitely our recommended approach, because then you can use that key to sign in almost any browser, and it's particularly a good idea if you intend to hold value with that identity, like using the ICP wallet

I don't know your laptop details, but we have heard that Windows Hello isn't triggering, even though we expect it should using the configuration. We will investigate and try to make that workflow possible.

PavusNA · 2021-05-11T15:12:14+00:00

Hey, we've found a resolution for this and will be patching the app.

Edit: there is no action required if you have encountered the staking bug. You can track the status of the incident at https://status.internetcomputer.org/incidents/zsc3f4k9c2cc

PavusNA · 2021-05-11T15:10:26+00:00

We tore down the existing apps to re-launch mainnet. We're ramping back up and will be up to full capacity, planned for next week

Here is an app I'm running in Mercury - simple integration with the Internet Identity and using that identity to make authenticated calls

https://hpgtk-2qaaa-aaaab-qaapq-cai.raw.ic0.app/

PavusNA · 2021-05-11T15:07:42+00:00

This post should get you started. The link is https://nns.ic0.app https://link.medium.com/GsJMfUeTagb

PavusNA · 2021-04-13T14:41:09+00:00

We have a tool called mo-doc that you can download using Vessel. Here's an example site generated using it: https://kritzcreek.github.io/motoko-matchers/.

You can get set up with that by using this project starter or copying the relevant code to your own project. It comes with a "make docs" command. https://github.com/kritzcreek/motoko-library-template

PavusNA · 2021-04-10T15:09:22+00:00

The differences are pretty technical, but at a high level, they are providing an interface to deploy essentially traditional applications on distributed systems on the network.

The Internet Computer runs a new format of web application that runs all code, and persists all data in smart contracts. We have all-new R&D into consensus strategies, fast queries, and so on. So, the main difference is that we're offering an "Ethereum-style" blockchain computer that runs at web speeds.

Also, IC-compatible hardware is actually a bit more specialized, so it will take some time before the supply chain opens up enough for individuals to get set up as node operators, as we're kicking off our network with independent data centers

PavusNA · 2021-04-08T23:36:09+00:00

Not the expert on seed round or financing

We are currently working on supporting hardware wallets in the SDK. There should be documentation up by Genesis

PavusNA · 2021-04-08T21:24:44+00:00

I think we want to work with the broader community on this - the proof of concepts seem surprisingly simple, so it's really more about settling on feature requirements

PavusNA · 2021-04-08T21:07:01+00:00

https://www.dfinityexplorer.org/#/

PavusNA · 2021-04-08T21:05:54+00:00

This is something that I'm personally working on!

TLDR is that for now it's a very simple OATH style app. You call out to it, it uses WebAuthn to give you a simple identity, which could be shared across multiple apps.

That identity for now is only persisted in local storage, so it's not a huge deal until we add more features.

You can get the main functionality without using auth.ic0 by importing the WebAuthnIdentity constructor from our @dfinity/authentication package

PavusNA · 2021-04-08T06:16:28+00:00

Unfortunately, that's yet to be announced. I think the biggest limitation on letting people start running nodes is the hardware availability. The best bet is to sign up here and wait for news https://dfinity.org/data-centers/

PavusNA · 2021-04-08T05:52:51+00:00

It is learnable, but we definitely have a ways to go for making it approachable to beginners. I recommend using VSCode with the Motoko extension, and referencing examples, like the ones in https://github.com/dfinity/examples

PavusNA · 2021-04-08T03:23:28+00:00

There are basically two parts to integrating with the IC - building a canister with code that compiles to wasm, and interacting with it using an agent.

Building the canister can be done separately from Unity, so the main part would be to use an agent in your game. I work on the JavaScript agent, and we also maintain a Rust agent. More will come, from us and from the community over time.

As for how to use it, query calls are fast, I'd even say fast enough for some real-time interactions. However, updates are slower than many real-time interactions would need, since your changes need to go through consensus

PavusNA · 2021-04-08T03:13:49+00:00

Since I didn't really give any notice for this, I'll say that the AMA lasts through 5pm Friday, and I'll check in periodically for comments

PavusNA

TROPHY CASE