Pew Research published a study on public perceptions of privacy and security in the post-Snowden era. The chart on what information people find sensitive is interesting. Anyone surprised by this?
++ EFF, Mozilla, Cisco, Akamai, IdenTrust and University of Michigan announced that they will be launching a certificate authority (CA) in 2015 to issue free SSL/TLS certificates. More info here and here. Schneier likes it.
Digital Identity and Government
Do you want a strong identity, backed by a government, for conducting electronic transactions? If you don't care which government it is, see the invitation from the digital government poster-child Estonia to register as an e-resident. For now, you'll need to visit Estonia for the in-person identity proofing but in the future you should be able to go to the local embassy.
++ UK IDAP lays out the process used by certified companies under the GOV.UK Verify program to verify a person's identity: (a) capture evidence that the identity exists (b) validate the identity (c) establish a link between a person and identity (d) counter-fraud checks (e) activity history.The pretty pictures version. We use it, and you can too, but it is not a standard version.
+++ Where is the UK IDAP going? ComputerWeekly.com provides a viewpoint from not the usual suspects.
cyberforge: random and relevant
The Information Standards Quarterly on the emerging JSON based identity protocol suite.