attest signed statements about URLs and keys

One sign-up, with a passkey your device holds. Then any site can let you upvote, comment, vouch for someone, or make a public statement, and none of those sites has to run accounts, passwords or a database. Every statement is signed by your key, is public, and can be checked by anyone without asking us.

…

Try it

The demo page has live upvote and comment widgets. What I attested lists everything your key has signed. About explains why this exists and where it is going.

Put it on a static site

<script type="module" src="ORIGIN/attest.js"></script>
<div data-attest data-target="https://example.com/article" data-comments></div>

Leave out data-target to attest the page's own canonical URL. Counts also come from a plain cacheable GET: ORIGIN/read?targets=https://example.com/article. Everything a key has signed: ORIGIN/by/did:key:…. The whole append-only log, for mirrors: ORIGIN/log?since=0.

Integrating? The integrator page has the widget, the API, the record format and how to verify without us. Technical covers passkeys, delegation, AT Protocol and the threat model. Agents: /llms.txt.

Source: github.com/orbitalfoundation/attest, MIT. Donations: anselm.eth.