Internet Identity Workshop XLII Report
IIW XLII brought 287 people to the Computer History Museum in Mountain View for three days of sessions on identity, agents, and the legal and technical foundations of first person digital life. The agenda reflected a community grappling with real deployment challenges: SEDI and duty of loyalty, agentic identity, MyTerms, post-quantum cryptography, and the EUDI wallet. AIW2 followed on Friday, continuing the agentic internet conversation.
Continue reading {Internet Identity Workshop XLII Report}
Enhance, Duplicate, or Replace? None of the Above.
Alan Mayo frames the digital identity design choice as enhance, duplicate, or replace, and places Utah's SEDI in the "replace" bucket alongside purist decentralized identity. That badly misreads the architecture and the policy goal. SEDI is not trying to eliminate institutional trust; it is state-endorsed, rights-first digital identity reuse that keeps institutional authority where it belongs while moving presentation and consent closer to the individual.
Continue reading {Enhance, Duplicate, or Replace? None of the Above.}
Data Protection Missed the Point; Loyalty Gets It Right
SEDI's duty of loyalty provision shifts the basis for regulating online interaction from the data to the relationship. Where GDPR and similar frameworks treat personal data as the object to be governed, duty of loyalty treats the relationship between the individual and the organization as the thing that matters. MyTerms gives that relationship concrete, operational rails.
Continue reading {Data Protection Missed the Point; Loyalty Gets It Right}
MyTerms and SEDI's Duty of Loyalty
MyTerms, the new IEEE 7012 standard, gives individuals a protocol for proposing terms to websites as first parties. MyTerms could become the concrete mechanism through which SEDI’s duty of loyalty requirement, essentially fiduciary obligations to identity holders, are expressed and enforced.
Continue reading {MyTerms and SEDI's Duty of Loyalty}
A Legal Identity Foundation Isn't Optional
Modern verification systems force individuals to rely on institutions to prove facts about themselves, creating a "proof gap" that becomes untenable in a world of cryptography, AI agents, and machine-speed economic activity. While portable digital credentials can close much of this gap, they depend on a deeper foundation: a publicly governed, legally recognized digital identity that gives people standing, continuity, and enforceable rights across sectors. State-Endorsed Digital Identity (SEDI) provides that non-optional base layer, enabling portable proof, accountable delegation, and interoperable trust infrastructure to function at societal scale.
Continue reading {A Legal Identity Foundation Isn't Optional}
Fix Identity First
The SAVE Act attempts to strengthen election integrity by imposing documentary proof requirements, but in doing so it highlights a deeper problem: the United States lacks a universal, purpose-built identity system. Relying on legacy credentials like birth certificates and driver's licenses creates administrative burdens and risks disenfranchising eligible voters. If stronger identity assurance is truly needed for voting, the real solution is to invest in federated, universal, and accessible identity infrastructure first.
Continue reading {Fix Identity First}
SEDI and Client-Side Identity
Client-side certificates were technically sound in the 1990s, but they failed because individuals weren't willing to pay for identity proofing. SEDI fixes that economic flaw by providing a state-endorsed, high-assurance digital identity to anyone who wants one, creating a durable foundation for secure online transactions and future digital credentials.
Continue reading {SEDI and Client-Side Identity}





