I read the Getting started guide, watched the demo video, and tried the cert-issuer, cert-tools, and the set-viewer locally. I understand how Blockcerts work but I have 2 questions:
I saw the “Add issuer” option in the Android app, it’s asking an Issuer URL, and a One time code, what is it for? Is there some demo data, that I can use to try
If I understand well the university issuing the blockchain credential of a student, has to ask the students to send theirs? or can the university generate random public key and send them to the student who will import the credentials to the app? what is the recommended process?
Thanks a lot and congrats, Blockcerts is an awesome project!
Both questions revolve around similar issues of the issuer establishing a strong connection with known recipients in a manner that results in getting the data needed for reliable issuance of recipient owned certificates.
Since providing certificates is an issuer initiated process, the issuer needs to invite recipients to participate. The issuer URL and one-time code is required to help the recipient add the proper institution. Once this occurs, the Issuer will display on the recipients app, ready to receive certificates. In the background, the app has sent the issuer the recipient’s public key. It is by virtue of controlling the private key (via the app) that recipients can demonstrate ownership of their records.
Yes, the issuing institution must ask the recipients to send their public key. The mobile app makes this easy. If a university were to simply generate keys for students, then those students would not truly own their credentials. One of the main values of this ecosystem is providing credentials that have no ongoing dependence on the issuer. Think Syria. If institutions collapse, people should not lose the ability to use their records.
Thanks for your answer it’s very clear.
Just one question that I still have in my mind, how as an issuer can you generate a One time code? Can the one time code be used to many users or is it unique for each user? Can the user send it’s name / identity through this process?
The way we implemented Blockcerts within Learning Machine’s software was to generate a one-time code each time a list of recipients was invited to get the app. So, each invite email sends the same one-time code to everyone on that list. Visually, we kept the Blockcerts branding as a best-of-class example of how to use Blockcerts in a commercial context. The email below automates the action by simply asking the recipients to download the app and click a button:
Hey @Chris_J, We are currently working on the concept of a Seminar for Students about Blockchain and Business models. We are planning to include something with a hands-on experience.
We are very interested in trying out your blockcerts application for this course only. We will have around 20 participants. Do you think we could somehow find a way to showcase the product in the seminar or really use it to issue a certificate via the app to those participants? Just for educational purposes, this is not a commerical background. Kind regards Pascal
