This new release comprises both Bug Fixes and Enhancements.
Bug Fixes
Generation of self-signed certificates now properly includes generation of a self-signed Certificate Authority (CA) certificate for signing Identity Principal Certificates. As a result, self-signed certificates generated by YouID are now usable across Apple Mail, Microsoft OutLook, Mozilla Thunderbird, and any other email application that supports the S/MIME protocol for generating digitally signed messages using a self-signed certificate.
Note: This functionality depends on the inclusion of an email address — which will be the sender in such messages — when completing the YouID Credentials Input Form during the credential generation process.
Thunderbird Examples
-
Creating a Digitally Signed Email Message
-
Reading a Digitally Signed Email Message
-
Looking up Digital Certificate Details from an Email Message
Enhancements
YouID now includes the generation of a portable HTML-based profile document comprising public credentials produced as part of its credentials generating functionality. This kind of profile document is generally referred to as a Link-In-Bio page, and includes machine-computable metadata (in the form of a Profile Graph) that mirror relevant private credentials held in a local X.509 certificate.
Credential Verification using the NetID-TLS protocol
NetID-TLS is a TLS-handshake extension that includes the addition of a public credentials lookup that matches privately held information to a public mirror, by de-referencing a hyperlink used to denote the subject of an X.509 certificate. Typical credentials used in this lookup include the following:
- Public Key
- SHA1 hash of Public Key (in a variety of forms that can even include Emoji encoding)
The screenshots that follow depict the steps involved, following credential generation by YouID.
- Credential Bundle Generation by YouID that output a Zip Archive comprising secure PKCS#12 files and other artifacts, as shown here:
- PKCS#12 credentials are imported to a local credential store, typically by a simple double-click
-
Link In Bio Profile Document
- Identity Authenticity is verified via a NetIDTLS Server
Immediate Download Availability
- …for iOS on iPhone or iPad
- …for Chrome, Brave, Opera, and other compatible browsers
- …for Firefox
- …for Safari (coming soon!)