Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Need a landing page explaining control of their new agent #8

Open
b1conrad opened this issue Jul 18, 2023 · 0 comments
Open

Need a landing page explaining control of their new agent #8

b1conrad opened this issue Jul 18, 2023 · 0 comments

Comments

@b1conrad
Copy link
Member

When a new affiliate receives the verification email message, they click on the link therein to show that they control the email address.

Currently, the next page they see is the Manage applications page.

Instead we need a welcome page, from the agent offering it services and asking how they want to know that they control it. There are two (better with three?) dimensions to this:

  1. the random code in the URL (actually the event channel identifier (ECI)) that would be hard for an attacker to guess
  2. a cookie set in their browser (named the system self channel ECI with value chosen randomly)
  3. we could offer something additional (a verifiable credential (VC) or simply a password/phrase of their choice)

Having read this, they can then offer to accept the responsibility of controlling an agent in the cloud.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant