NSTIC, Google SEO
divdiv class=ukn-article-content readability=75#13;
pIn case you missed it, Google is now a a href=http://searchenginewatch.com/article/2121003/In-Google-We-Trust-Your-Identitycredentialed provider/a of Trusted Identities for the federal government. This means that the NSTIC, or National Strategy for Trusted Identities in Cyberspace, framework now has federally recognized and certified identity providers./p
pBut who are these providers exactly, what is the NSTIC and how does this affect the users in matters of privacy, anonymity or even SEO (Search Engine Optimization)? Below is a video that helps easily explains what it means to be working with the #NSTIC and how these issues are addressed, emor not/em addressed by the NSTIC Framework./p
h3Why Should I Watch?/h3
p/
h3WATCH THIS VIDEO! (No really, you should)/h3
pThere are a lot of reasons to watch of course. However, because everyone is wondering why so many changes are happening in search and social. Changes such as SSL secure keyword referrer data, and if you do not know about the new Identity Market, if you haven’t made yourself familiar with the tenets of the NSTIC and the a href=http://searchenginewatch.com/article/2105755/Real-Names-Google-Government-The-Identity-EcosystemIdentity Ecosystem/a, you might miss that this is more likely part of a much larger plan at Google, PayPal, Facebook and the like./p
pSo watch THE VIDEO, learn about the Identity Ecosystem. There are companies already set to go, marketplaces ready to run, and credentialed providers such as Google, PayPal and Equifax who have already started implementation procedures. It can’t be ignored because it already exists; they might just hoping maybe you don’t notice, well at least not yet./p
h3The NSTIC: Myths, Misnomers, and What About SEO (Search Engine Optimization)?/h3
pimg alt=national-strategy-for-trusted-identities-in-cyberspace border=0 src=http://cms.searchenginewatch.com/IMG/139/192139/national-strategy-for-trusted-identities-in-cyberspace.png?1314848223 class=center title=national-strategy-for-trusted-identities-in-cyberspace//p
pWhat does this mean and why should you care? As you read the documents, they sound so bright and shiny I think I need shades./p
pSo what are the glossy points brushing over? Well, there are several areas in the documentation that are not covered well, in much depth, or at all and so a few points for thought./p
pMost of these are discussion points gleaned from documentation cited below, but summarized for your reading pleasure, as I’m sure you’re on your fourth or fifth eggnog by now./p
h3Why Does This Matter to SEO (Search Engine Optimization)?/h3
blockquoteemAnd the notion of strong identity was never invented in the Internet. Many people worked on it – I worked on it as a scientist 20 years ago, and it’s a hard problem. So if we knew that it was a real person, then we could sort of hold them accountable, we could check them, we could give them things, we could you know bill them, you know we could have credit cards and so forth and so on, there are all sorts of reasons./em/blockquote
pThe new changes to Google rel=author, rel=publisher, social relationships as a ranking factor, SSL search for keyword data, changes to the privacy policy to represent EU standards the list goes on and on are all seemingly unrelated, but are they?/p
pWell if you read the NSTIC and the quotes of Eric Schmidt, one of these things looks like the other. In context, of an Identity Ecosystem knowing who wrote something, who published it, knowing social relationship all makes sense. Hiding keyword data and other information from public view as part of a credentialing policy makes sense as trying to meet the new Google privacy policy of the EU is much more difficult than meeting the one here in the U.S./p
pPart of the new Google is about contextualizing SEO (Search Engine Optimization) in the concepts of an Identity Framework where Google will know who you are and what you read, wrote even possibly emailed because who knows how many of the factors will come into play once it is all tied together. This is unclear, but identity factors as part of ranking, well that already exists, they just call it Trust Indicators. Ah a rose by any other name…well still says NSTIC./p
pNow, in the older days of Google, they would say, we can’t do that because it leaves all the non-Googly people out, but I don’t think that matters with today’s Google as G+ IS a known ranking factor, so why not Identity Factors? Remember according to Eric Schmidt of Google, G+ is an Identity Network, not a social one./p
pemRead the full quote by a href=http://searchenginewatch.com/article/2105755/Real-Names-Google-Government-The-Identity-EcosystemEric Schmidt in a previous article/a I wrote and you can see the premise exists; now it seems we are just experiencing the implementation./em/p
pPLUS, most people emwill/em choose an identity provider somewhere down the line if they want to use certain services (read the documents). Guessing Google thinks they will be a dominant provider./p
h3Some Other NSTIC Myths/h3
ulli readability=6
pstrongMyth of voluntary or opt-in /strong- One of the key components of the NSTIC documentation is that this is all voluntary. You’re told over and over, that you don’t emhave/em to participate in the NSTIC framework. Well this may be technically true; I don’t have to have a car either. However, when Google, PayPal, Equifax are now credentialed providers of government services now and soon to be sites like Facebook are later. When hundreds of sites move toward this program, what do you do? Opt out?/p
/li
li readability=13
pstrongMyth of security/strong – Most articles I have read in relation to the assumed increased security of this Identity Ecosystem have all called it into the crosshairs as inherently more insecure. So what are the security considerations?/p
pIf you think about it, why would emnot/em logging in be that much more secure anyway? Yes, you take away those people who use password as their password, but you could also just program into systems emnot/em to take those words. You also could get rid of the antiquated method of password creation. Did you know a four unrelated word, four letter common word password is inherently more secure than your can’t ever remember Capital letter, #umber, 30characters? Crazy huh?/p
pWhat else? Well what if someone gets a hold of your identity? Hackers have cracked emevery/emsystem out there:/p
ul class=quicklistliNSA/li
liCIA/li
liGoogle/li
liFacebook/li
liAnd 1.8 million people recently affectedem /emby a hack at Square!/li
/ulbr/pThese very valid points raised by the security community are not answered in the documentation and this would be a huge SCORE, huge ACCESS and a huge DATA carrot for hackers (i.e., a huge jackpot for the reasons hackers’ hack, so why wouldn’t they give it a go?)./p
pimg alt=password-comic border=0 src=http://cms.searchenginewatch.com/IMG/332/201332/password-comic.png?1320767068 class=center title=password-comic//p
/li
li readability=16
pstrongMyth of anonymity -/strong As you read the official NSTIC documents; you will see they mention the word anonymity frequently. The user is anonymous; their identity is fragmented and doled out piece by piece. Fragmented because your Identity will only be doled out by your ID provider small bits at a time on an as needed basis to say your bank or favorite forum for access./p
pHowever, what the documents don’t seem to say (and maybe I missed it), but the video does very clearly, strongTHE IDENTITY PROVIDER SEES EVERYTHING./strong That Identity Provider who has no laws restricting what they do with that data. That Identity Provider who now has all your data in one place. Who you bank with, what medical records you store, your tax info, what you did with PayPal, and if Google possibly your email, your apps, your G+ and well you can see where the rabbit hole goes./p
pSo the speakers on the video are careful to use the word – pseudo-anonymity and when they don’t the speakers quickly correct to the word pseudo-anonymity. Because that is what you have, not anonymity, but pseudo-anonymity because your Identity Provider can see everything. In addition, remember there is no privacy and without governance, the provider can do with your data what they want./p
/li
li readability=12
pstrongMyth of privacy -/strong The documents focus on anonymity also has a focus on privacy. Well the same reasons your data is not anonymous are the same reasons your data is not private. Now let’s take it one step further, your data is now strongONE HUGE DATA CARROT/strong./p
pOne huge data carrot on a 3rd party system. Legally 3rd party systems do not give you due process. What does this mean? This means that if someone sues you, if someone you know is sued, if the government wants to look into your doings online they do not need to notify you, in fact they don’t actually need a warrant in all cases. The legal protections of 3rd party data are feeble at best and getting less, not more secure every day. So, the idea that the NSTIC is private is more mythology./p
pSo privacy and anonymity are pretty, bright and shiny words, but at this time meaningless in practical applicable context, because they require governance which is surely coming right?/p
/li
li readability=13
pstrongMyth of governance -/strong Without governance there is no privacy, there is no anonymity. These words come directly from the video. In the NSTIC there is no governance over the data that is being collected by the Trusted Identity Providers such as Google and PayPal (and soon to be Facebook). There is no law saying what they can or cannot do with that information, it is what you agree to in the TOS (Terms of Service). You read that right?/p
pI could go more into this, but instead I will just bullet point some of the recent areas being defended by the EFF (Electronic Frontier Foundation), the ones who try to keep your cyber land free and privacy still your right, and let you see just where and how these laws get tested every day./p
pstrongSpecific Cases (a few)/strong/p
ul class=quicklistlia href=https://www.eff.org/press/mentions/0/0/0-14 target=_blankGov. Can Now Track Your Phones Without Warrant/a/li
lia href=https://www.eff.org/press/mentions/2010/4/16-1 target=_blankYahoo Beats Feds in E-Mail Privacy Battle/a/li
lia href=https://www.eff.org/press/mentions/2011/8/10 target=_blankUS internet providers hijacking users’ search queries/a/li
lia href=https://www.eff.org/mention/carrier-iq-quietly-tracking-your-phone target=_blankCarrier IQ, Quietly Tracking Your Phone/a/li
/ulbr/pOne important note though, if your data is sitting on someone else’s servers emyou usually never have to be informed of anyone’s access to it/em, if the third party decides to give it to them and this means even in cases of the courts, government or law enforcement. This also means there are many cases where due process also doesn’t exist. The company owns the data. The company decides. On this single point alone, the NSTIC framework should be met with deep contemplative exercise./p
/li
/ulh3So WELCOME to your NEW BRAVE INTERNET!/h3
pSo welcome to the new internet! The concepts of the NSTIC framework are also playing itself out in Facebook right now with Timeline… Read the NSTIC then use Timeline. You will see what I mean. No log-ins to major sites, don’t go there to interact, just stay on Facebook./p
pAll your data will be held by your Identity Provider free to do with that data what they wish or even if they don’t wish, a court can order it handed over./p
pNow with Trusted Providers, I am sure some will be good, some will be poor, but in the end your data will be seen, tracked and know by that provider. All you do, everywhere you log-in today, instead of segmented across many sites, in one place, all activity. Sorry just got a chill. Need to go get a blanket!/p
pOk back to your eggnog and yes and yes strongFINISH THE VIDEO!/strong Happy New Year!/p
h3Additional Documentation/h3
pimg alt=Data Collectors border=0 src=http://cms.searchenginewatch.com/IMG/197/200197/datacollectors.png?1319838146 class=center title=Data Collectors//p
pNSTIC Documentation (Note this is a worldwide, not just US effort) Just to show this is not conjecture and a few to many apple martinis. Here is the documentation to help you better understand that entire Identity Ecosystem, from the Federal Government and Google themselves./p
pimg alt=Data Users border=0 src=http://cms.searchenginewatch.com/IMG/199/200199/datausers.png?1319838265 class=center title=Data Users//p #13;
spanema target=_blank href=http://sesconference.com/london/registration-details.htmlRegister now/a for a target=_blank href=http://sesconference.com/londonSES London 2012/a, the Leading Search amp; Social Marketing Event, taking place 20-24 February, 2012. SES Conference amp; Expo features presentations and panel discussions that cover all aspects of search engine-related promotion. Hurry, early bird rate expires February 3!/em/span#13;
/div/div
