Who runs this home, and what it keeps.
rootcard.org is one public home for rootcard identities. This page says who operates it, which key it signs with, what it stores and how to leave. It describes this home only, not the rootcard standard or other homes.
Operator
rootcard.org is operated by Hexagon#DNTT. That is a rootcard identity: its ID card is verified in your browser when you open it, and its public profile carries the operator's contact details.
The site runs the open-source rootcard/site with
rootcard-host 0.3.1.
Host key
This home signs a receipt for every instance homed here. Check a receipt against this key, or
fetch it yourself from /v0/host.
- Current key
- loading…
If the key is ever rotated, the earlier key stays listed here and in /v0/host as
retired, so receipts it signed keep verifying.
What this home cannot do, and how to leave
- It cannot reset your password, recover a lost recovery card, read your vault or sign in as you. Nobody can ask the operator to do any of this: it is not technically possible.
- Download your account file at any time from your account.
- Move to another home, or retire the identity for good, with the recovery card and the key tool. Your id and handle stay the same when you move.
Service
- Free to use for the
globalrealm. Usage is limited per network address and per identity; the limits are listed in this home's API. - rootcard is pre-1.0 and has not had an external security review. The service is offered as is, with no guarantee of availability. Keep your recovery card and an account file so you can move if this home goes away.
What is stored
| Data | Who can read it | How long |
|---|---|---|
| Public log (your signed events, handle, home) | Anyone | Kept: it is public, and other services check proofs against it |
| Public profile | Anyone | The newest version you published |
| Vault and private data | Only you: encrypted in your browser with your password | The newest copy you saved; after a password reset or a move this home stops serving it |
| Sessions after sign-in | This server | Deleted after 24 hours unused, or at logout |
| Sign-in challenges | This server | Single use, valid 60 seconds |
| Network addresses, for the rate limits | This server | Held in memory for at most two hours |
Never stored or received: your password, a password hash, or your recovery key. The pages use no cookies, no analytics and nothing from third parties.