• sloppy_diffuser@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Blockchains I fully agree don’t deal with trusting a public key. Something out-of-band is needed if you need to trust the author of a claim and not just the claim is consistent. Concsistancy is where I see a block chain adds value.

    Lets look at Matter which is operated by a coalition of companies (connectivity Standards Alliance or CSA).

    What if the CSA wants many certifiers and not just ul.com?

    What if the CSA wants a single datastore of those results? Maybe ul.com stops certification for Matter devices and no longer wants to maintain infrastructure for the CSA. The CSA then needs a cache of past certifications some place then.

    What if CSA members don’t trust any one company in the coalition to host that federated datastore? For example, Apple fears if Google hosted they will introduce random faults when queried to cause a poor user experience when checking an Apple product. Nobody is neutral enough that everyone can agree on one company to host. Since this is an international standard, it could be the US and China won’t agree on a host. Point is, nobody trusts anyone to consistently report the same thing.

    They don’t even trust an outside entity like ul.com to provide consistent reports.

    Once its been said on a blockchain, it cannot be unsaid. It would take 2/3 of the coalition to agree to a false result to screw over the other 1/3.

    Important decisions like votes on what accounts/wallets on the chain can post certification results also requires a 2/3 majority that can be audited on the ledger. Trust of those accounts is established off the blockchain.

    If a certifier doesn’t want to certify a device, a blockchain won’t solve that. Its solves the trust problem that results will be consistent during the millions of requests for a certification result. My bank has a trusted certificate as a trusted web master. Doesn’t mean they won’t give me different loan options based on location/browser/any other meta data they can get. That is their right to not give consistent results. That doesn’t mean there are not any use cases for it.