Trust and decentralization

With recent NSA surveillance revelations many in the tech community started asking again for more decentralization and encryption of our Internet tools and services. We should build technologies which allow us to minimize trust and dependencies on others. Tools which allow each of us to self-protect ourselves. A new wave of such tools is emerging and while I agree that it is good that we have such tools, the question is if we want to live in such a society. In which society you would like to live? In society which is build around not trusting anyone. Or in society where you can trust your fellow beings and where we handle rare exceptions, misuses of trust?

I am not proposing any changes in direction of technological development of such decentralized tools and services, or our adoption of them. But I think we should rethink our perspective on the issue and solutions. We should change our mindset when we are developing these tools.

Instead of thinking how we want to minimize trust of others, or even how to create zero-trust systems, we should know that we can trust most other users on the Internet. That we can rely on them and that it is good that we have a community where we cooperate based on the trust. The issue is that we do not know who we can trust and how to handle cases of misuses of the trust. But this is then a good direction to think about. Let us develop ways to handle rare exceptions, develop ways to detect exceptions in advance, maybe even prevent them. Instead of saying that because we cannot trust few, let us not trust anybody, we should be saying let us trust everybody, but know how to handle well those few who misuse the trust.

Decentralization can be viewed as means to combine/coordinate efforts of people towards a common goal.

For few years now I have been involved in open wireless network in Slovenija, wlan slovenija, build around open source mesh technology. Mesh networks are now again becoming popular because they are decentralized. But for me their decentralized nature is not important because it would give us protection against NSA (in fact security properties of current mesh networks are pretty bad), but because it allows community to come together with little coordination overhead and build a network together. A network where none might be before, providing Internet connectivity to everyone.

Wikipedia is an encyclopedia anyone can edit. It is build around the principle of assuming good faith of fellow editors. Of course this does not mean that there are no misuses and vandalism. But it is build around trust, understanding that vandalism is a rare exception compared to all the edits made on Wikipedia. And it works. Its editing is decentralized to anyone in the world with little coordination between them.

Bitcoin is build in a decentralized manner in a way that each participant is trusted minimally. They work and vote together and if more than 50% agree on something, this is taken as true. The idea is that it is highly improbable that more than half of users will be corrupted or compromised. In this respect it is similar to Wikipedia, where we also assume that most of the users will not be malicious. But the perspective is different. We do not assume good faith in fellow users of Bitcoin.

So while basic ideas of distributed trust might be similar, the perspective is one which makes the difference.

There is research done based on the observation that you can often trust people in your social circles more. One can use information about your friends from Facebook to build decentralized systems which are even more resistant to coordinated attacks of malicious users. But this is not the type of trusting others I am talking about here. Trusting your friends more is nothing special, of course you know them. But that you can trust a stranger, that is what makes society strong. That you can trust even when you do not have any other information about a new person. The rest of society promises to handle a misuse, if anything happens. Why are not we building technical systems which would work the same?

Sadly, in our current society it is not true that we always handle misuse of the trust properly. But we should then strive for it. Instead of giving up on the society and collaboration and trying to build technological fixes, we should work on fixing what we already have. Laws with holes and situations where those with power escape consequences of misusing the power.

If you have any relevant link, project, idea, comment, feedback, critique,
language fix, or any other information, please share it bellow. Thanks.
Recent Tweets @mitar_m