Skip to main content

Posts

Showing posts from April, 2026

Build Your Own Trust Chain

We have added the ability to create custom trust chains in Certisfy that are verifiable independent of the Certisfy PKI root. These trust chains will lack the identity component of trustworthy Certisfy certificate so owners of such chains are responsible to implementing their own identity procedures. Receivers of claims from such custom trust chains will have to whitelist (bookmark in Certisfy) the root certificate in order for claims from those certificates to pass verification. Use cases for custom trust chains are many. Software package supply chain trust There is currently an ongoing challenge around software supply chain security, ie developers integrate software libraries and components into their own applications and solutions are faced with the prospect of unwittingly including malicious vulnerabilities. The problem ultimately boils down to the difficulty of ensuring the people who have write access to these packages are trustworthy. This would remain an ongoing problem requiri...

Trusted URLs Via Cryptographic Signatures

With Certisfy sticker functionality, ie the ability to publish cryptographic signatures as claims, users can share trusted URLs by leveraging the verification tied to trustworthy claims. URLs can be included in trustworthy claims and posted for anything for which a user wants to project trust. They can also be restricted to sources(ie referrer) so that the link can't be fraudulently reposted elsewhere. When you include links in a claim that you want to associate trust with, users will first be able to verify the link provider via the claim and then decide whether the link and associated information is trustworthy. In an AI saturated online space, there is significant value in a link/url being able to provide a strong signal of authenticity or trust. A trusted creator or a journalist can post links tied to a Certisfy verification as a means to project trust and expand reach. With verification links backed by high quality trust projection, we can have in essence a verified web. Here...

Private Messaging In Public Forums

We have introduced private messaging over public forums in Certisfy, ie you can create and post encrypted messages in public(online) forums via Certisfy private message links.  You can also add a Certisfy link to your profile (or an appropriate place such as a web page) that will allow someone clicking on it to create a message that can be encrypted and sent/posted where appropriate. To allow others to encrypt messages for you, you'll first have to create a certificate if you don't already have one. Then copy an encryption URL from the certificate that you then share with others who may want to send/post a private message to you. In cases where a private message link is via an non-trusted source (internet at large), it is best to link private messaging to verified IDs (could be anonymous), that way a user can be sure their private message is going to the expected party.  This ability is supported by allowing users to trigger the message encryption from a verification scre...