richardl@ufp.com

<p>UFP Identity is the only dynamic security platform created for e-commerce sites, design agencies and developers that simplifies login authentication.</p>
<p>If there is a token, we support it. UFP Identity supports a wide variety of secure tokens enabling faster, more streamlined access to your websites all the while protecting user accounts from being compromised and preventing spam enrollments to your website.</p>
<h4>Our challenge</h4>
<p>UFP Identity set out to solve a huge technical challenge: To protect (I mean really, really make private!) online user’s personal info, make the process to access any number of websites at once really easy, and stop bad guys from hacking your stuff.</p>
<p>Our technology platform includes:</p>
<ul>
<li>Strongest level of password authentication and encryption!</li>
<li>Spam protection preventing unwanted user account creation</li>
<li>Account-compromise protection</li>
<li>Threat level adjustment to heighten login protection for your users</li>
<li>Seamless token integration (password, Yubico, OTP, various OATH tokens, one-time codes to phone/email/irc)</li>
<li>Quicker logins for your users. By the way we’re building a mobile app for that.</li>
<li>Universal password support for websites that use UFP Identity. This means login credentials can work on multiple websites.</li>
<li>Real-time monitoring of every login ensures your users are your users</li>
<li>Reporting tool for website administrators details every login transaction and outcome (coming soon!)</li>
<li>Multiple tokens to single account</li>
<li>Multiple accounts to single account</li>
</ul>
<h4>Certificate Signing Request</h4>
<p>The Certificate Signing Request requires a private/public key<br />
pair and the private key is encrypted with a secret key. In order to<br />
create a good secret key the plugin attempts to get good random data<br />
from /dev/urandom. If this fails, the plugin makes an attempt to<br />
securely retrieve random data from https://www.random.org</p>
<h4>Enrolling users</h4>
<p>Activating this plugin by installing the certificate will upload<br />
information about your users to our servers. We only enroll the<br />
username, email and hashed password over a private SSL connection<br />
using 2048 bit keys. We will never use any information about your<br />
users for any purpose other than authentication and verification. We<br />
will never use the email for any purpose other than resetting<br />
credentials or authentication. We will never sell or give up any of<br />
the information about your users.</p>
<h4>Telemetry</h4>
<p>We send telemetry data to our servers over an SSL connection with 2048 bit keys. This telemetry data only contains data that we<br />
would otherwise get with a successful install of the UFP Identity plugin. The telemetry can be turned off by adding an option<br />
‘identity_telemetry_enabled’ => ‘no’.</p>
<h4>Location Information</h4>
<p>We make a call to http://freegeoip.net/json/ to get location information for the Certificate Signing Request. This<br />
is to help pre-populate the required fields and minimize the amount of work you need to do. We only do this once, upon install.</p>


UFP Identity

The UFP Identity plugin integrates Wordpress login and user management seamlessly with the UFP Identity platform.

psqr

<p>Virtual Public Squares are digital spaces for open communication. Publishers establish identities, preferably on their own websites, and use those identities to attach verifiable provenance to content with cryptographic signatures.  The signed content is broadcast into one or more Virtual Public Squares. Once signed and broadcast, the content becomes public and portable.</p>
<p>The content, with provenance, may move from one Virtual Public Square to another, may be indexed and made searchable, and may be displayed to readers in feeds, curated lists, or search results. Every time a Virtual Public Square displays content, the publisher’s cryptographic signature is attached to that content and can be verified.</p>
<p>In the event that any Virtual Public Square blocks content from a publisher, that publisher remains free to broadcast that content to any other Virtual Public Square.<br />
Similarly, publishers are free to set up their own Virtual Public Squares and ingest the content from existing Virtual Public Squares. In this fashion, Virtual Public Squares impose practical disincentives to censorship without infringing on the rights of speech or association of any of the participants.</p>
<p>The primary use of Virtual Public Square technology is to acquire content from specified publishers without third party interference. This will often appear in the format of a news feed. The first commercial use of Virtual Public Square data is to populate widgets on websites containing curated content from a set of publishers that seek to cross-promote each other to keep readers engaged and maximize audience attention.</p>
<h3>Required PHP Extensions</h3>
<p>The following PHP extensions are required to update and delete DIDs with an API call:</p>
<ul>
<li>json</li>
<li>mbstring</li>
<li>openssl</li>
</ul>


Virtual Public Square

Virtual Public Squares operate on identity. Add self-hosted, cryptographically verifiable, decentralized identity to your site and authors.

UFP Identity vs Virtual Public Square