In a previous post, I outlined how we can merge the corporate accountability of PKI with the organic network effects of a Web of Trust (WoT). But to understand how this works in practice, we have to look at the mathematical foundation.
Traditional identity systems treat cryptographic keys as single-purpose tools. You have one key for encryption, one for signing, and another for authentication. If you want to prove a new attribute about yourself, you are typically forced to issue an entirely new key pair or rely on a centralized identity provider to vouch for you in real-time.
The Human Trust model flips this paradigm. It relies on a foundational concept: the multi-attribute reuse of a single key identifier across distinct certificates.
┌──► [ mTLS / CBA Cert ] ───► (Establishes secure pipe)
│
[ SINGLE PRIVATE KEY ] ──┼──► [ Peer-Signed Cert ] ──► (Vouched by Friend A)
│
└──► [ Attribute Cert ] ───► (Verified Organization role)
One Key, Multiple Expressions
At the center of a user’s digital identity is a single private key and its corresponding public component (Key ID). Instead of stuffing every single piece of identity data, corporate roles, and personal relationships into one bloated, rigid certificate, this model creates an ecosystem of smaller, modular certificates orbiting the exact same Key ID.
This architectural choice unlocks three critical capabilities shown in the image above.
1. Progressive Trust Amplification
An initial key pair might start with zero external validation—it simply proves possession. However, as you interact within the ecosystem, other users (acting as leaf-node signers) issue new, distinct certificates targeting your exact same Key ID. Each signature layers on top of the initial key, structurally adding trust to it over time without requiring you to cycle keys or update a central database.
2. Contextual Isolation via Varied Attributes
By using separate certificates for the same key identifier, you can bind completely different attributes to your cryptographic identity depending on the context:
- The Authentication Layer: One certificate contains only the bare minimum data required to execute a secure mutual TLS (mTLS) connection or Certificate-Based Authentication (CBA).
- The Relational Layer: A companion certificate, signed by a peer or a contact via the Web of Trust, contains metadata verifying a personal or business relationship.
- The Sovereign Layer: Self-signed or community-vouched certificates can assert specific attributes that you control, rather than relying on a commercial root authority.
3. “Out of Band” Discovery
When you connect to a service provider using mTLS, your client proves possession of the private key using the primary authentication certificate. Because the service provider now holds your public Key ID, it doesn’t need to ping a centralized directory to learn more about you.
Instead, the provider can seamlessly ingest your smaller, companion “sidecar” certificates that share that exact same Key ID. The service provider reads the peer signatures and attributes bound to those companion certificates, evaluating your trustworthiness entirely within the local context of the connection.
Shifting the Burden of Trust from Math to Relationships
Cryptography is exceptional at proving that a math problem was solved; it is inherently terrible at proving that a human is responsible.
By reusing the same key identifier across a web of modular, peer-signed certificates, we change what a cryptographic key represents. It is no longer just a random string of bits used to open an encrypted pipe. It becomes a localized aggregator of human reputation—a single mathematical anchor that handles connection mechanics on one side, and carries the weighted trust of your entire network on the other.
Leave a Reply