Suppose there are 3 persons, Alice, Bob and Peter.
They are identified by their pseudonyms (public RSA keys).
Alice has a key
Alice, Bob has
Bob-Friends. Peter has
Alice expresses trust to
The question is, How can
Bob-Friends prove to
Bob-Work he's being trusted by
Alice (and therefore
Bob-Friends too), without revealing that
Bob-Friends belong to the same person, and/or plausibly deny such a fact?
NOTE: We do not discuss timing attacks here (such as "Please express trust to THAT pseudonym and I'll see who will appear as trusted to me afterwards")
I have a possible solution involving a "credit system", where participants emit "trust tokens" which can then be transferred by their recipients. But, this has a downside of having to support a LONG credit transfer history. Is there a solution that does not need it?
P.S. Please retag this question appropriately (reputation, trust etc) - I can't create new tags yet :)