#tlsnotary-chat

linagee: ok, yesterday i was just wondering if you could expand a bit on your use case. it sounds interesting. don't know much at all about 23andme

waxwing: scientists use data on opensnp that (anyone) has submitted. if they knew it was authentic (no tampering) it would make them happier. :-D

linagee: i see. it's an interesting example where privacy matters. at face value it seems like a good application for that purpose

one could also ask 23andme to provide digital signatures (that's true for basically any tlsnotary application)

waxwing: hah. I've already ask the equipment vendor that 23andme uses. they basically said "wow that sounds neat. we'll wait until our clients bring it up though." (also, if they put this in the machine firmware, it may be years until it has any use...)

(equipment vendor = illumina)

(because the best case would be signing the data right at the machine.)

linagee: there's no need to go deep down into the software; 23andme could just append a pgp sig to the end of the zip file, for example

true. they are already custom generating it every time you request it. (as I found last time, lol.)

it would be one more command they just need to insert in their build script. "insert signature here"

I don't know any devs from there though

yes; the thing to understand about tlsnotary is it's just replacing the function of a digital signature whether either (a) the server can't be bothered or (b) they don't want to, for some reason