verified

From IndieWeb

A verified profile or identity is one that has been confirmed by either an algorithm (like rel-me) or an authority (usually a silo) as belonging to a particular entity like a person or organization, or another independent website, and often indicated with a colored checkmark next to its name.

Why

Verified identities can help reduce instances of mistaken identity, or forged identity, when the only things you can see about an identity are online.

Developers: verified identities may help reduce spoofing that is otherwise possible when determining authorship.

IndieWeb Examples

Distributed verification or proof that an account on one site is under the control of the same person as another site has been enabled by several sites or plugins.

  • Jeremy Keith has built Huffduffer to follow rel="me" links to show your connected social accounts without you having to enter them individually.
  • Kevin Marks built a browser plugin which matches rel-me links on sites and provides either green checkmarks or red Xs to indicate a bi-directional link between the two.

Silo Examples

Various social network silos (e.g. Flattr, Google) has or has had verification of third party content on their sites.

Verification on silos is commonly misunderstood as a status symbol, given its high profile on such sites, and difficulty to obtain it for most people, and potentially extremely opaque processes behind it.

Micro.blog

micro.blog offers rel-me domain name verification. [1]

Flattr

Flattr uses internally mapped URL:s to known proprietary identities and then used proprietary OAuth API:s of other services, like Twitter and GitHub, to let user verify multiple identities per platform.

Google

Google's "Authorship in web-search" feature used rel-author and similar to establish authorship of a web page and then tried connecting that to a Google+ profile, either directly or indirectly by following rel-me links to and from the authors profile and the Google+ profile. Google then presented a profile of that user in connection to the page in their search result.

Twitter

Twitter offers a subset of users the option of a blue "verified" checkmark icon on their name/profile, intended to "establish authenticity of identities of key individuals and brands on Twitter."

Twitter has come under increasing fire in 2016/2017 for having a relatively opaque process by which they verify users or not. Their verification is only available to certain (unknown) classes of users, despite their stated terms, which causes an imbalance of perceived power and influence on the platform.

On 2017-11-09 Twitter itself acknowledged this problem:

Verification was meant to authenticate identity & voice but it is interpreted as an endorsement or an indicator of importance. We recognize that we have created this confusion and need to resolve it. We have paused all general verifications while we work and will report back soon

The verification status is also used by first-party Twitter applications to filter notifications of verified users (and thus replies they see) to only show other verified users, in addition to the general "unfiltered" notifications view.

Since November 2022, Twitter has expanded access to the blue checkmark that represented the verification status to anyone capable of paying for a $8 subscription within a limited set of countries, causing it to lose its previously established meaning. This allowed abuse of the fact that people come to recognize this mark as a symbol of authenticity, using it for phishing, impersonation and various kinds of jokes. The separate notifications tab mentioned above is also given to those new users, enforced to be their new default notifications view and therefore de-prioritizing interactions from those that did not purchase the new subscription.

Strava

Strava may designate "notable public figures" as "Verified", however "It is not currently possible to request or purchase a verified badge."

Strava also has "clubs" which can apparently sometimes get verified as well, by filling out a form:


Plurk

Plurk has a verified program. Interestingly they indicate:

What's another way to show Plurk users my account is authentic?
Linking to your Plurk profile from an official website is the easiest way to confirm your identity to your fans.

Brainstorming

Authorship + Rel-Me

First determine the authorship of a web page. If the author profile is on the same site (same host name) as the web page, and thus can be expected to not have been spoofed, then check for a bi-directional rel-me link between that author profile and the identity profile to verify it as.

Identity graph

To enable verification of more complex rel-me identity links one would need to compile an entire identity graph, the identity's own subset of the full social graph, and traverse the identity graph from the author profile, to the target and then back and ensure that the full chain of links exists and are valid. This would require something like identengine or RelSpider .

See Also