Zero Knowledge Architecture, is it possible?
How to protect users privacy?
Presented by:
m4dz
m4dz is a strange animal. Through many lives, he always tried to teach to others what he learnt himself. Previously a web developer (nobody's perfect), concerned about privacy, a respect of private data, and cyber security. He's now Tech Evangelist at alwaysdata. He tries to inform about present and future of digital issues. His favorite book always remains «Alice in Wonderland».
Did you already hear about the ZKA pattern? Zero Knowledge stands for a pattern where no-one but the owner is aware of the content of the data. It's mainly in use in the Zero Knowledge Proof pattern, an authorization design. Despite its powerful concepts, Zero Knowledge patterns remain misunderstood.
In fact, there's a small amount of contents about what Zero Knowledge really is, what it implies, and how to use it. Architectures that use ZK by Design are nearly undocumented. It's a widely unknown territory.
Here's a wide and comprehensive talk about ZKA, with cryptography, keys exchange, data storage, blob secured transfers, privacy use-cases, and many more. Finally, we'll be focused on how to implement it in a web browser environment which is unsecured by design (because always bet on JavaScript).
Let's see how we can build secured (web)apps to improve our users' privacy.
- Date:
- Duration:
- 45 min
- Conference:
- LinuxFest Northwest 2019
- Language:
- Track:
- Security
- Difficulty:
- Medium