Skip to content

Commit e53b021

Browse files
authored
Update garner.md
1 parent 55860da commit e53b021

1 file changed

Lines changed: 6 additions & 6 deletions

File tree

_pages/garner.md

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,17 +20,17 @@ A developer tool that provides a Tor endpoint for self-sovereign identity. It se
2020

2121
## Why is Garner Important?
2222

23-
Garner serves self-sovereign identity documents. It has five major advantages over use of `HTTPS` or even bare `tor`.
23+
Garner serves self-sovereign identity documents. It has five major strengths, many of them advantages over use of `HTTPS` or even bare `tor`.
2424

25-
**Self-Sovereignty:** The ultimate goal of Garner is self-sovereignty. [XIDs](/xid/) allow users to have a truly self-sovereign identity that they can issue, hold, and redact as they see fit. Garner offers the next step, because it allows them to also serve their own identity documents in a self-sovereign way.
25+
**Self-Sovereignty:** The ultimate goal of Garner is self-sovereignty. [XIDs](/xid/) allow users to have a truly self-sovereign identity that they can issue, hold, and redact as they see fit. Garner offers the next step because it allows them to also distribute their own identity documents in a self-sovereign way.
2626

2727
**Accessibility:** Garner is easy to install: it's just a cargo install. It's also easy to run: there are just three commands, one to generate a keypair, one to start a server, and one for a remote user to get your content. This is a huge accessibility advance over HTML, which requires the setup of complex Apache config files and the acquisition of a certificate, all of which will be beyond the average user.
2828

29-
**Privacy:** Because Garner runs across the Tor network, everything is private. Your identity serving address is hidden (protecting any pseudonymous identities) and the requester's address is hidden. Perhaps most importantly, this makes the identity documents served through Garner censorship-resistance. As long as Tor is available, no attacker can prevent you from serving them or the requester from asking for them.
29+
**Privacy:** Because Garner runs across the Tor network, everything is private. Your identity serving address is hidden (protecting any pseudonymous identities) and the requester's address is hidden. Perhaps most importantly, this makes the identity documents served through Garner censorship-resistant. As long as Tor is available, no attacker can prevent you from serving them or the requester from asking for them.
3030

31-
**Authentication:** Garner builds its Tor address from the private key you supply, which means that your running a Garner server (which other people connect to with the corresponding public key) implicitly offers live proof of key control. This is very powerful authentication: remote users know that you controlled the private key when the server was started. Not only does this avoid the need for external dependencies like DNS or a Certificate Authority (CA), but it also protects from stale-signature and post-compromise replay attacks.
31+
**Authentication:** Garner builds its Tor address from the private key you supply, which means that you're running a Garner server (which other people connect to with the corresponding public key) implicitly offers live proof of key control. This is very powerful authentication: remote users know that you controlled the private key when the server was started. Not only does this avoid the need for external dependencies like DNS or a Certificate Authority (CA), but it also protects from stale-signature and post-compromise replay attacks.
3232

33-
**Security:** Garner is purposefully very constrained. It is not a general-purpose web-server, but only a limited identity-document server. This is an intentional design to minimize its attack surface. It was also built in close coordination with Tor technology, through use of the [official Arti crate](https://gitlab.torproject.org/tpo/core/arti/), which should also improve its security level.
33+
**Security:** Garner is purposefully very constrained. It is not a general-purpose web-server, but only a limited identity-document server. This is an intentional design to minimize its attack surface. Garner was also built in close coordination with Tor technology through use of the [official Arti crate](https://gitlab.torproject.org/tpo/core/arti/), which should improve its security level.
3434

3535
## How Does Garner Work?
3636

@@ -51,4 +51,4 @@ This allows the pseudonymous, censorship-resistant, self-sovereign distribution
5151

5252
## Related Use Cases
5353

54-
* [CryptFinger](https://github.com/BlockchainCommons/developer-web-site/blob/master/_pages/envelope-usecases-data.md#part-one-public-cryptfinger) (GitHub, out-of-date)
54+
* [**CryptFinger**](https://github.com/BlockchainCommons/developer-web-site/blob/master/_pages/envelope-usecases-data.md#part-one-public-cryptfinger) (GitHub, out-of-date)

0 commit comments

Comments
 (0)