TLSNotary seems cool: https://tlsnotary.org/

janitor for /zk and some more stuff here linktr.ee/randomishwalk

If the MPC node and user collude they can generate arbitrary statements from the target server.

The main unsolved problem to bring this data on-chain.

Working on building zkTLS infra/products. A ruthless empiricist and meme connoisseur.

http://opacity.network

I wish some of the big SSL terminating companies, Cloudflare, Amazon, Google, etc would run these nodes. At least that would minimize the target server+MPC collusion risk, which would be my main concern.
Ideally though, it would just be built into webservers so I could request notorized responses directly.

It would be easier just to change the https standard to add a signature in the response header.

There have been various proposals over the years to no progress.

Woah, TIL about this effort: https://datatracker.ietf.org/doc/draft-ietf-httpbis-message-signatures/

It looks *not* abandoned .. would be nice to signal support for efforts like this. Web based oracles would be way more meaningful.

This is a proposal by digital bazaar which is a self sovereign identity company (verifiable credentials).

Google, Amazon etc are the ones who control these standards boards. Unless they support it won’t go through.

Even still i think odds are slim it will be adopted.

It looks like the lead author (Annabelle Backman) is at Amazon, which seems promising. Imagine if they added this to everything hosted on EC2 by default.

My point is this. Ask yourself is it in this big tech companies to have all https responses be portably verifiable?

I have lots of arguments for why it’s not. Even if there is a standard for it doesn’t mean all companies would enable that feature.

Cryptographic signatures also adds a lot of overhead to https.

Hm -- wonder who else is on that list? I guess I could just look it up myself 😂