Anonymous credentials are digital credentials that let a person prove they hold a valid right or attribute, such as membership, age or a paid subscription, without revealing a persistent identity that could be tracked between…
Network privacy controls are the operating system settings that limit what your device reveals about itself and its user whenever it joins a network. Every connection exposes some information, such as a device name, the…
Privacy preserving identity describes digital identity systems designed to confirm facts about people while revealing, storing and tracking as little as possible. The aim is to let someone open an account, prove eligibility or sign…
Operating system firewall controls decide which network connections your computer will accept or start, and they are built into nearly every modern desktop and many mobile systems. A firewall is software that compares each connection…
Selective attribute disclosure is a technique that lets a person reveal only chosen facts from a digital credential, such as being over a certain age, while keeping every other detail on that credential hidden. The…
Software repository security covers everything that happens to a package between the moment a developer finishes it and the moment your operating system downloads it. A software repository is a server, or network of servers,…
Identity attribute disclosure is the moment when facts about you, such as your name, email or age, move between parties so a service can recognize you or decide what you may do. It happens every…
Package manager trust is the set of decisions your operating system makes on your behalf each time it installs or updates software from a repository. A package manager is the tool that downloads, verifies and…
Identity data minimization is the practice of collecting, using and keeping only the identity information a task truly requires. Rather than requesting a full name, birth date, home address and government ID number by default,…
Secure application installation is the set of checks that confirm a program comes from its real developer, has not been altered, and receives only the access it needs, all before it gets a chance to…