awesome-trust-registries

A curated list of trust registry systems and adjacent technology.

Disclaimer: Not all protocols and models are interoperable.

Protocols

• DNSsec : A suite of extension specifications by the Internet Engineering Task Force (IETF) for securing data exchanged in the Domain Name System (DNS) in Internet Protocol (IP) networks. Used sometimes for extending to Trust Registries.
• Extensible Provisioning Protocol : an XML based protocol used by the Internet industry, particularly the registrars and registries in managing domain names.
• Open ID Federation (OIDF) : A specification that describes how two Entities that would like to interact can establish trust between them by means of a trusted third party called a Trust Anchor.
• Trust Registry Protocol v2 : API based protocol that asks: Does Entity X have Authorization Y, in the context of Ecosystem Governance Framework Z?
• WHOIS : WHOIS is a TCP-based transaction-oriented query/response protocol that is widely used to provide information services to Internet users.
• Registry Lock : Status code set by registrar intended to combats domain hijacking.
• RDAP : IETF based protocol that enables users to access current registration data and was created as an eventual replacement for the WHOIS protocol.
• RPKI : proves the association between specific IP address blocks or ASNs and the holders of those Internet number resources.

Models

• Credential Trust Establishment: A document model that describes whether a user should trust the issuer of this credential?.
• EBSI Trust Chains : An interaction model which defines three roles: Root Trusted Accreditation Organisation (Root TAO), Trusted Accreditation Organisation(s) (TAOs), and Trusted Issuer(s) (TIs).
• x509 Certs: A standard defining the format of public key certificates used as a basis for HTTPS and TLS.
• W3C Verified Issuer / Verifier Verifier List Data Model : This work focuses on how a party or its agent can decide whether or not to engage with a counterparty in a transaction.

Providers

• EU Trust Lists : The Member States of the European Union and European Economic Area publish trusted lists of qualified trust service providers in accordance with the eIDAS Regulation.
• CIRA: Canadian Internet Registration Authority
• cheqd : Leverages the EBSI Trust Chain Model over DID Linked Resources.
• Northern Block : Higher assurance trust registry leveraging DNSSec.
• Sphereon's OpenID Federation API : This API allows the interaction with federation endpoints to manage and verify entities within a federation.
• Trinsic : Trust Registry API using Trust Over IP's Trust Registry Protocol v1 spec.
• TRAIN : The approach allows for the flexible definition, consideration and publication of trust lists as well as the verification of trust framework compliance (e.g., eIDAS including LoAs or other trust framework/schemes that can also be application/industry-specific) with different Levels of Assurance (LoA), using DNS(SEC) as a root trust anchor.
• Who.is : A Whois domain lookup allows you to trace the ownership and tenure of a domain name.
• Yoti : SSI Network

SDKs

• Veramo SDK for cheqd : NPM package to enable developers to interact with the cheqd ledger using Veramo SDK, a modular and pluggable client app SDK for decentralised identity and SSI applications.
• Dock SDK : Blockchain based trust registry.
• Findynet :
• Ory Hydra : The Ory Hydra SDK allows for integration with a self-hosted Ory Hydra OAuth2 Server.
• Trinsic SDK : Trust Registry v1 API SDK
• TBD SSI Service : A golang service that allows you to build Trust Registries.
• Sunbird RC Cord : Sunbird RC is an open-source software framework for rapidly building electronic registries, enable atestation capabilities, and build verifiable credentialling with minimal effort.
• XFSC Toolbox : German government sponsored project of open source-based software components were developed for the creation of federated digital ecosystems

APIs

• cheqd Studio : API product for interacting with the cheqd network, including creating Trust Registries using the EBSI Trust Chain model.

Ecosystems

• Estonian Internet Foundation : Estonia's trust infrastructure.
• Trinsic Identity Acceptance Network : SSI Ecosystem for Acceptance
• Velocity : Velocity Network Foundation® is a non-profit membership organization, hosting the leading workforce-tech and ed-tech vendors and solution providers, on a mission to build the next-gen data utility layer underlying the global labor market
• GAN Foundation : The Global Acceptance Network (GAN) Organization is a neutral, nonprofit entity dedicated to establishing a public utility for digital trust. Just as the Internet’s Domain Name System required global, multi-stakeholder governance through ICANN, the GAN Organization serves as the governing body for this new layer of digital trust infrastructure.
• Privado : Privacy focused ecosystem that lets you launch your own credentials with ZKP, on-chain verification, SSI, and Transitive trust.

Workshops

• Registration Operations Workshop (ROW) : Informal industry conference that offers a platform for discussing the technical intricacies of registration operations within the domain name system.

Contribute

Contributions welcome! Read the contribution guidelines first.