From: Tim May <tcmay@got.net>
Date: Mon, 15 Dec 1997 09:00:07 +0800
To: cypherpunks@Algebra.COM
Subject: Identity, Persistence, Anonymity, and Accountability--Part I of II
Message-ID: <v03102804b0ba20d71bf6@[207.167.93.63]>
MIME-Version: 1.0
Content-Type: text/plain




[Note: This is a two-part article I posted to the "Nym" list. I'm posting
it here as well, but not in a "cross-post" form, because it obviously
touches on many themes of interest to Cypherpunks. Declan M. has created
this new list to discuss anonymity and pseudonyms. It is, predictably,
largely duplicative of discussions on the Cypherpunks and other lists, but
Declan and others feel it is needed. It is not necessarily open to all, to
reduce the number of insults, ASCII art posts, drunken ramblings (mine
excepted), and off-topic spams and such,  so don't ask _me_ for
instructions on how to subscribe to it. Declan may send you instructions if
he wants to, of course.]

[The second part will follow this part]

There are many swirling notions of anonymity here, and a bunch of what I
think are misconceptions about the link between anonymous systems and
"accountability."

Some here believe accountability (which I'll define and discuss in more
detail below) is important enough to take precedence over a "right to
anonymity." I think this is confusing some important issues.

First some observations:

* The norm in most interactions is a very loose amount of formal checks of
identity credentials. Most of us never actually check the credentials of
our friends and associates. Most commercial transactions, and most travels,
involve no identity credentials whatsoever. (A point nicely make my Marc
Rotenberg today.)

* However, as we have repeated dealings with people, on lists or in person,
we begin to establish a "sense of identity" for those persons, a repeated
history. This has nothing _formally_ to do with identity credentials, but
much to do with _expectations_ about the future. Thus, in my several years
of dealing with "Black Unicorn" I have come to view him (or her, or it) as
a persistent personna. Whether or not he truly is one person, and whether I
know his (alleged) True Name, is largely unimportant.

* It is very important that even we non-lawyers keep in mind what a
_contract_ is. A contract is an offer, and an acceptance. Whether a True
Name is part of the offer, by any of the parties, is unimportant. (In terms
of enforceability of the contract, in terms of going after parties who fail
to meet the terms of a contract, some measure of identity may of course
help accountability. But this is epiphenomenol to the basics of the
contract...it's just a matter of convenience.)

* Hence the view many of us have that if Alice and Bob interact, they may
or may not use fake names, nicknames, handles, putative True Names, or even
DNA-verified biological markers. Their call.

* In cases where accountability is Very Important, as in purchases of large
ticket items, the usual method is to use strict title search companies,
specialists in tracking actual records. Title companies, in other words.
(And, even then, proofs of identity are less extreme than many
anti-anonymity advocates might think. In the purchase of three homes, I've
only had to "flash" my state-issued I.D. card. In fact, it was a driver's
license, hardly designed as an actual proof of identity. Of course, there
are certain ontological assumptions about identity in such large-ticket
purchases, such as that I.D. is backed up by other things, including
possession of a title deed.)

* The main question that involves Washington (or other lawmakers) is this:
Under what circumstances may the state compell identity to be produced?

I happen to agree with several on this list, including E. Volokh and
(actually) D Brin, that there are cases where identity can be compelled.
Even if it only means a _sworn statement_ (as in "making an X" on a
statement written by others). Applying for a passport, appearing before
court, perhaps driving on the public roads.

But note that there absolutely is no requirement in the United States for a
general form of identification. Non-drivers need not have any form of I.D.
And as we have seen in court cases, a la Lawson v. Kolender (where a black
man in dreadlocks used to like to walk the streets of San Diego...the cops
stopped him many times and jailed him for not having I.D. on him...the
court ruled that people don't have to present credentials issued by the
state to walk the public streets).

* Therefore, the issue is not of a "right to anonymity," which would
probably be as nebulous to debate as the "right to privacy" (which Bork
probably was correct in saying cannot be found in the Constitution), but,
rather, the issue of when the State may compell identity. To put it in the
blunt terms we libertarians find useful: "When can men with guns tell us we
have to produce a piece of paper with our pictures on it that they find
acceptable?"

Possibly for the situations I mentioned above. But maybe not even in all of
those situations. (Next time I am called for jury duty, and my last time
was in 1973, I plan to take no state-issued I.D. junk with me...I will
_tell_ them who I am and leave it at that.)

* In ordinary interactions and in commercial transactions (modulo gun
purchases and a few other similar areas), identity cannot be compelled.
Alice is free to ask Bob for his name, or his blood type, or anything else
she chooses (modulo questions banned by the Civil Rights Act, disgustingly
enough), and either is free to cancel the interaction or transaction as
they wish. Contracts again: an offer made and an acceptance.

* Now if Alice wishes to _extend credit_ to Bob, or take his promise to pay
via a check or some other "delayed clearing" instruement, she is free to
request various things that will satisfy her that she can later track down
Bob and collect from him.

Importantly, this is not a _state_ function. This is still a matter of
contract. Bob is of course free to refuse to give his name and to cancel
the transaction.

* It's a fact that most vendors (Alice) are less interested in acquiring
market research data by getting True Names than they are in selling stuff.
Hence, most merchants don't care about True Names. And for online clearing
(instant clearing, as with cash or guaranteed payments sytems), names
really don't matter. Even Radio Shack, which makes a big point of asking
for names and addresses, will gladly make a sale to those who refuse to go
along.

* There are cases where this normal "Alice doesn't care about names"
situation is distorted by other considerations. Recently, airlines have
been instructed by the FAA to do a credential check...they are happy enough
to comply, as it cuts down on the practice of companies buying advance
tickets in bulk and then deciding later who will actually use the tickets.
(I believe the pre-FAA ruling situation, where airlines didn't bother to
check I.D.s to be a good indicator of what free market forces would produce
absent such an FAA rule.)

Certain large-ticket purchases may no longer be made in cash. Part of this
is the move to control money-laundering and smurfing, and the "structuring"
laws. Black Unicorn has an amusing story of trying to buy a car in suburban
Washington, with cash (or a cashier's check, I forget which), and having
law enforcment arrive a short time later and hold him for questioning....

Likewise, it's becoming more common for motels and hotels to demand photo
I.D. Some even refuse to accept cash without a credit card (which we know
is not an actual I.D., but it sort of acts as one). I'm not sure what all
the reasons for this are. Here are some, briefly: fear of being stung by
someone who trashes the room, concern about being charged with enabling
prostitution, pressure from regulatory boards (who may be pressured by law
enforcement), or perhaps just the general attitude that "I.D. is required."

(As I've said, this attitude hasn't filtered down to ordinary daily
transactions.)

So, identity is not the same as accountability (though there are some
correlations). And lack of identity does not mean criminality. And most
importantly, most cases where some proof of identity is requested don't
need any state involvement in what are private transactions or contracts.
Lastly, there is no "is-a-person" (in the cryptographic sense)
credentialling system in the U.S.


In Part II of this post, I'll combine these various points, made somewhat
anecdotally here, into a more graphical form.

--Tim May



The Feds have shown their hand: they want a ban on domestic cryptography
---------:---------:---------:---------:---------:---------:---------:----
Timothy C. May              | Crypto Anarchy: encryption, digital money,
ComSec 3DES:   408-728-0152 | anonymous networks, digital pseudonyms, zero
W.A.S.T.E.: Corralitos, CA  | knowledge, reputations, information markets,
Higher Power: 2^2,976,221   | black markets, collapse of governments.
"National borders aren't even speed bumps on the information superhighway."


Voluntary Mandatory Self-Rating of this Article
(U.S. Statute 43-666-970719).
Warning: Failure to Correctly and Completely Label any Article or Utterance
is a Felony under the "Children's Internet Safety Act of 1997," punishable
by 6 months for the first offense, two years for each additional offense,
and a $100,000 fine per offense. Reminder: The PICS/RSACi label must itself
not contain material in violation of the Act.

** PICS/RSACi Voluntary Self-Rating (Text Form) ** :

Suitable for Children: yes  Age Rating: 5 years and up.
Suitable for Christians: No Suitable for Moslems: No  Hindus: Yes
Pacifists: No  Government Officials: No  Nihilists: Yes  Anarchists: Yes
Vegetarians: Yes  Vegans: No  Homosexuals: No  Atheists: Yes
Caucasoids: Yes  Negroids: No  Mongoloids: Yes
Bipolar Disorder: No  MPD: Yes and No  Attention Deficit Disorder:Huh?

--Contains discussions of sexuality, rebellion, anarchy, chaos,torture,
regicide, presicide, suicide, aptical foddering.
--Contains references hurtful to persons of poundage and people of
color.Sensitive persons are advised to skip this article.

**SUMMARY**
Estimated number of readers qualified to read this: 1
Composite Age Rating: 45 years