-
Notifications
You must be signed in to change notification settings - Fork 103
/
faqs.html
736 lines (536 loc) · 44.8 KB
/
faqs.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
<!doctype html>
<html lang="en" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml">
<head>
<title>Frequently Asked Questions · Solid</title>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1">
<link
rel="shortcut icon"
type="image/x-icon"
href="/favicon.ico?"
/>
<link rel="stylesheet" href="/assets/css/main.css" />
</head>
<body>
<header id="header-navbar" class="navbar">
<a class="navbar-brand navbar-item navbar-link is-arrowless" href="/">
<img
src="/assets/img/solid-emblem.svg"
alt=""
/>
<span class="is-uppercase is-size-4">Solid</span>
</a>
<nav class="navbar-menu is-hidden-mobile">
<ul class="navbar-end">
<li class="navbar-item has-dropdown is-hoverable is-size-6 is-size-5-tablet">
<a
class="navbar-link is-size-6 is-size-5-tablet is-arrowless"
href="/about"
>About Solid</a>
</li>
<li class="navbar-item has-dropdown is-hoverable is-size-6 is-size-5-tablet">
<button
class="navbar-link is-size-6 is-size-5-tablet"
aria-haspopup="true"
>Developers</button>
<ul class="navbar-dropdown">
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/developers/tutorials/getting-started"
>Getting Started</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/developers/tools"
>Solid Tools and Libraries</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/apps"
>Solid Apps</a>
</li>
</ul>
</li>
<li class="navbar-item has-dropdown is-hoverable is-size-6 is-size-5-tablet">
<button
class="navbar-link is-size-6 is-size-5-tablet"
aria-haspopup="true"
>Users</button>
<ul class="navbar-dropdown">
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/users/get-a-pod"
>Getting a Pod</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/apps"
>Solid Apps</a>
</li>
</ul>
</li>
<li class="navbar-item has-dropdown is-hoverable is-size-6 is-size-5-tablet">
<button
class="navbar-link is-size-6 is-size-5-tablet"
aria-haspopup="true"
>Community</button>
<ul class="navbar-dropdown">
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/newsletter"
>Newsletter</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/events"
>Events</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="https://forum.solidproject.org/"
>Solid Forum</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="https://matrix.to/#/#solid_project:matrix.org"
>Chat</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="/press"
>Press</a>
</li>
<li>
<a
class="navbar-item is-size-6 is-size-5-tablet"
href="https://github.com/solid/process/blob/main/code-of-conduct.md"
>Code of Conduct</a>
</li>
</ul>
</li>
</ul>
</nav>
</header>
<div id="draft-warning"></div>
<script>
if (
document.location.hostname === 'localhost'
|| document.location.hostname === 'solid.github.io'
|| document.location.hostname.substring(document.location.hostname.length - 10) === "vercel.app"
|| document.location.hostname.substring(document.location.hostname.length - 11) === "netlify.app"
) {
const draftWarningElement = document.getElementById('draft-warning')
draftWarningElement.innerHTML = `
<div class="message is-danger is-large" role="alert">
<div class="message-body">
You are currently viewing historical content of the Solid website. If you are looking for reliable information, visit the live site at <a href="https://solidproject.org/faqs" title="The official Solid website">SolidProject.org</a>.
</div>
</div>
`;
}
</script>
<nav id="breadcrumb" class="breadcrumb">
<div class="container">
<ul>
<li>
<a href="/">
Home
</a>
</li>
<li>
<a href="">
Frequently Asked Questions
</a>
</li>
</ul>
</div>
</nav>
<main id="main">
<div class="container">
<div class="columns">
<div class="column is-two-thirds">
<article class="section content">
<p>Got a question that’s not here? Try asking on the <a href="https://forum.solidproject.org">Solid forum</a> or the <a href="https://stackoverflow.com/questions/tagged/solid">Solid tag on Stackoverflow</a>.</p>
<h1 id="definitions">Definitions</h1>
<h2 id="what-exactly-is-personal-data">What exactly is personal data?</h2>
<p>Personal data is personal. It refers to data sets describing a person ranging from physical attributes to their preferences and behaviour. Personal data is a legal concept, not a technical concept, and it is not utilised in all jurisdictions.</p>
<details><summary class="has-text-primary">More details... </summary>
Examples of personal data include: location, genome data, written communication, spoken communication, lists of contacts, internet browsing habits, financial transactions, supermarket spending, tax payments, criminal record, laptop and mobile phone camera lens recording, device microphone recordings, driving habits via car trackers, mobile and health records, fitness activity, nutrition, substance use, heartbeat, sleep patterns and other vital signs.
In Europe <a href="https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e1489-1-1">personal data is defined under the General Data Protection Regulation (GDPR)</a> as "any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;"
</details>
<p><a id="interoperability"></a></p>
<h2 id="what-is-interoperability">What is interoperability?</h2>
<p>According to the <a href="https://dictionary.cambridge.org/us/dictionary/english/interoperability">Cambridge dictionary</a>, interoperability is “the quality of being able to be used together”. For example, if you use a Solid app, you can store your data in any <a href="#pod">Pod</a> because apps and Pods are interoperable. Also, you should be able to reuse data from one Solid calendar app to another because apps are interoperable.</p>
<p><a id="pod"></a></p>
<h2 id="what-is-a-pod">What is a Pod?</h2>
<p>A Pod is where data is stored on the Web with Solid. (<a href="http://www.youtube.com/watch?v=eJ6IrWc7Wt4&t=1m13s">see quote</a>). A user may store their data in one Pod or several Pods, and applications read and write data into the Pod depending on the authorisations granted by the user or users associated to that Pod.</p>
<p><a id="webid"></a></p>
<h2 id="what-is-a-webid">What is a WebID?</h2>
<p><strong>A WebID is a unique identifier</strong> used to identify a specific user. An example of what a WebID could look like is: https://fulano.pod.provider/profile/card#me. To share data with a third party, a user associates sharing preferences to the WebID of that third party. Don’t worry though: <a href="#fewer_passwords">it’s not just one more login to remember</a>.</p>
<details>
<summary class="has-text-primary">More details...</summary>
A WebID is an <a href="https://tools.ietf.org/html/rfc3987">Internationalised Resource Identifier (IRI)</a> that can be dereferenced as a <a href="http://xmlns.com/foaf/spec/">FOAF</a> profile document serialized in <a href="https://www.w3.org/RDF/">RDF</a> <a href="https://dvcs.w3.org/hg/WebID/raw-file/tip/spec/identity-respec.html">(source)</a>. In Solid, WebIDs are used to identify Agents i.e. people and organisations as well as to manage their access rights though <a href="https://solid.github.io/web-access-control-spec/">Web Access Control</a>.
</details>
<h2 id="how-are-pods-different-from-webids">How are Pods different from WebIDs?</h2>
<p><strong>The two are different things</strong>: <a href="#webid">the WebID is an identifier</a>, and <a href="#pod">the Pod is a data storage place</a>. They are provided by two potentially distinct entities:</p>
<ul>
<li>The Pod Provider hosts Pods</li>
<li>The Identity Provider allows you to only have one account (identified by your WebID) to log into multiple apps.</li>
</ul>
<p>To log into Solid apps and/or access data on Pods, you just have to provide your WebID and login to your Identity Provider, like “Sign in with Google” today. It is possible for the same company or organisation to be both a Pod Provider and a Identity Provider although they are <strong>distinct separable services</strong> that are compatible with other Pod Providers and Identity Providers (which means you are free to choose the provider that suits you the most).</p>
<details>
<summary class="has-text-primary">More details...</summary>
<p>An Identity Provider implements an identification protocol (e.g. <a href="https://openid.net/connect/">OIDC</a>), and allows you to prove that you own the WebID.</p>
<p>A Pod Provider delivers storage space under one or more domains, usually (but not necessarily) pointed to by <code><webID> solid:storage <pod></code> statements included in the profile document associated to the WebID.</p>
</details>
<h1 id="web-standards">Web Standards</h1>
<h2 id="how-does-solid-relate-to-other-web-standards">How does Solid relate to other Web standards?</h2>
<p><strong>Solid does not reinvent the wheel</strong>. When you use Solid you will still be able to access your data using the same Web browser on the same computer. Solid is still the web, but with a few things added and a few assumptions overturned (<a href="https://www.bbc.co.uk/programmes/m000bj15">see quote at 33:30</a>).</p>
<p>Solid adds:</p>
<ul>
<li>An identification system so that instead of having to sign in to everything with Google or Facebook you can sign in with your favourite Solid provider and you won’t be tracked.</li>
<li>Ubiquitous sharing control so that you can share anything with anybody no matter which social media they happen to be part of.</li>
<li>A sort of personal cloud storage or a A USB storage in the sky which is called a Pod.</li>
</ul>
<p>Solid overturns assumptions:</p>
<ul>
<li>When you start a Solid app, instead of the app storing the data itself, it stores it on your Pod. When you use the app, you choose which app to use, and you choose which Pod to use with which app.</li>
</ul>
<details>
<summary class="has-text-primary">More details</summary>
Solid is built on top of existing Web standards. The core Solid specification relies on <a href="https://www.w3.org/TR/ldp/">LDP</a> and <a href="https://solid.github.io/web-access-control-spec/">WAC</a> (<a href="https://github.com/solid/web-access-control-spec">WAC draft</a>, both being based on <a href="https://tools.ietf.org/html/rfc2616">HTTP</a> and <a href="https://www.w3.org/RDF/">RDF</a> vocabularies. Solid also uses a subset of <a href="https://www.w3.org/TR/sparql11-overview/">SPARQL</a> UPDATE through HTTP PATCH queries. Identification in Solid is based on <a href="https://www.w3.org/2005/Incubator/webid/spec/tls/">WebID-TLS</a> and/or <a href="https://openid.net/connect/">OIDC</a>.
</details>
<h1 id="storage">Storage</h1>
<h2 id="are-solid-users-expected-to-setup-their-own-servers-and-self-host">Are Solid users expected to setup their own servers and self-host?</h2>
<p><strong>No</strong>. Self-hosting means that your data would sit at home on your own physical hard drive or server. Self-hosting is possible but not essential when using Solid, and it currently requires some technical knowledge. A Solid user can rely on an Identity Provider and a Pod Provider, and is <strong>not expected to have any particular expertise</strong>. It is also possible to self-host and become a small Identity Provider and Pod Provider, to provide Solid to your family, association, friends…</p>
<details>
<summary class="has-text-primary">More details</summary>
The Solid standard is open as are some of its implementations such as the <a href="https://github.com/CommunitySolidServer/CommunitySolidServer">Community Solid Server</a> meaning that anyone can self-host their own Identity and Pod or the Identity and Pod of a group of users.
</details>
<h2 id="can-data-exist-in-more-than-one-pod">Can data exist in more than one Pod?</h2>
<p><strong>Yes</strong>, the same data point can exist in more than one Pod. You can choose to have more than one Pod deliberately, for example for work and for home, in which case, some data may be relevant to both settings. You can also choose to have a single Pod and give selective access. Some data is relevant to multiple users so may be replicated in a slightly different way in another person’s Pod. For example, if you have a conversation with someone the data may be stored in both your Pod and the Pod of the person you spoke with.</p>
<h2 id="is-it-possible-to-use-solid-offline-at-least-partially">Is it possible to use Solid offline (at least partially)?</h2>
<p><strong>Eventually, yes</strong>. The Solid long term vision includes local first and a flexibility of different topologies of patch-passing sync networks. However, there are no implementations yet.</p>
<h2 id="when-i-want-to-leave-a-pod-provider-can-i-take-my-data-with-me">When I want to leave a Pod provider, can I take my data with me?</h2>
<p>Yes, unless the Pod provider doesn’t allow you to. The best way to understand the service of a particular Pod provider is to read the Terms. There are some support tools like <a href="https://tosdr.org">Terms of Service; Didn’t Read</a> to help you understand the small print more easily.</p>
<details>
<summary class="has-text-primary">More details</summary>
The data in Solid Pods is structured according to Linked Data principles by the applications writing them in the first place. Therefore, the Pod Provider is completely neutral regarding the Pod <b>content</b>, and the same data structure should be supported by any Pod Provider. The storage technology picked by each Pod Provider is <a href="#how-storage">another question</a>.
</details>
<p><a id="how-storage"></a></p>
<h2 id="when-using-solid-how-is-data-stored">When using Solid, how is data stored?</h2>
<p><strong>It depends on the Pod Provider</strong>. From a user point of view, how the data is stored is not as important as how it is accessed and controlled. No matter who the Pod Provider is, in order to be Solid compliant, it has to expose data the same way: as resources in folders. However,the implementors of the standard are free to pick the underlying technologies according to their own purposes and constraints. That is why performance may vary from one Pod Provider to another.</p>
<details>
<summary class="has-text-primary">More details</summary>
As any standard, Solid only describes the interaction model the system must be compliant with. The Pod Provider only exposes a REST read-write interface to the clients, to which the storage technology is irrelevant, as it is in most Web-based systems. How this interface binds with the storage is specific to each Pod Provider.
</details>
<h1 id="identification">Identification</h1>
<h2 id="can-solid-help-store-data-of-an-organisation-not-an-individual">Can Solid help store data of an organisation, not an individual?</h2>
<p><strong>Yes</strong>. A WebID does not necessarily identify a single physical person: organisations and companies can get a WebID. More generally, a WebID may be used to identify a family, a team, or any group of people. Since the rights on a Pod are attached to WebIDs, Solid Pods can store data in any of these use cases with the same procedure.</p>
<h2 id="i-just-signed-up-but-have-two-profile-locations-what-is-the-difference-between-the-two">I just signed up but have two profile locations, what is the difference between the two?</h2>
<p>Solid specifications can be implemented by a variety of identity providers, Pod providers, and apps. This allows you to use services from a variety of providers and take the data along with you when you switch i.e. they are compatible.</p>
<p>You can find out the differences between each of the service providers by looking at their respective websites and terms and conditions.</p>
<p>Having two WebIDs with two different identity providers or the same identity provider is very much like having two email addresses. These WebIDs are unrelated to each other, and can have different data sharing preferences attached to them, e.g. one allowed to access your company documents, and the other your health record.</p>
<h2 id="if-i-join-solid-can-i-stop-using-it-when-i-want">If I join Solid, can I stop using it when I want?</h2>
<p><strong>Yes</strong>. To leave Solid, you will need to:</p>
<ol>
<li>Delete your Pod(s)</li>
<li>Delete your WebID</li>
</ol>
<p>Each Pod Provider may offer a its own procedure to delete Pods, which means closing the storage space they rented to you. Once your Pods are deleted, you can delete your WebID by closing your account at your Identity Provider. As for Pod Providers, the exact procedure may differ from an Identity Provider to the other. Remember that you need to log in your Identity Provider to have access to your Pods: if you delete your Identity Provider account first, you may lock yourself out of your Pods.</p>
<details>
<summary class="has-text-primary">More details</summary>
Technically, you may host your <a href="http://xmlns.com/foaf/spec/">FOAF</a> profile independently from your Identity Provider, and have it point to a WebID you control. In this case, to fully delete your Solid identity, you may want to delete this profile document as well.
</details>
<h1 id="the-business-model">The Business Model</h1>
<h2 id="will-pod-providers-get-paid-by-who">Will Pod providers get paid? By who?</h2>
<p><strong>This will be determined by the market</strong>. It is likely that several business models emerge, some where the user pays for storage, and some funded by advertising for instance, like on the current Web platforms. However, with Solid, if the terms of your Pod Provider change, or if you want to switch to an advertising-free Provider, you can do so conveniently without losing your data, such as your contacts and chat history.</p>
<h2 id="if-everyone-used-solid-would-i-lose-my-favourite-internet-services">If everyone used Solid would I lose my favourite internet services?</h2>
<p><strong>No</strong>. Search engines and communication tools do not need to track you to work. Hopefully over time all the nice things you get from silos which don’t let you determine your data sharing preferences will be echoed by new solid-compatible ones which do.</p>
<h1 id="the-bigger-picture">The Bigger Picture</h1>
<h2 id="doesnt-the-data-transfer-project-fix-the-data-concerns">Doesn’t the Data Transfer Project fix the data concerns?</h2>
<p>The <a href="https://datatransferproject.dev">Data Transfer Project</a> is a great start. The next step is to build a healthy array of options for users to make their data work for themselves.</p>
<h2 id="how-to-integrate-ios-and-android-apps-into-solid">How to integrate iOS and Android apps into Solid?</h2>
<p>It is possible for developers to take an iOS or Android app and make it Solid compatible by following the standard and supporting documentation.</p>
<details>
<summary class="has-text-primary">More details</summary>
Currently there are no developer kits in development for Android or iOS. If you really want to have an app that can be installed on Android or iOS, you might consider writing it as a progressive web app or writing it as a hybrid app.
</details>
<h2 id="arguably-the-semantic-web-or-linked-data-never-took-off-so-why-is-solid-working-with-it">Arguably the Semantic Web or Linked Data never took off, so why is Solid working with it?</h2>
<p>The <a href="https://en.wikipedia.org/wiki/Semantic_Web">Semantic Web</a> and <a href="https://en.wikipedia.org/wiki/Linked_data">Linked Data</a> principles and technologies have always meant to <strong>make data more reusable</strong>, and to <strong>make data independent from applications</strong>, which is why it is at the core of Solid.</p>
<details>
<summary class="has-text-primary">More details</summary>
The Semantic Web and Linked Data technologies are centered on the question of interoperability. By using these technologies, data is provided a context and is made more reusable. In order to achieve one of the goals of Solid and enable applications to share and reuse data without having the control over it, this kind of interoperability is key, and the Semantic Web and Linked Data principles and technologies seemed to be the fittest for this purpose.
</details>
<h2 id="does-solid-use-blockchain">Does Solid use blockchain?</h2>
<p><strong>No</strong>. Solid is not a blockchain technology, but it can interact and use other blockchain initiatives.</p>
<h1 id="security">Security</h1>
<p><a id="fewer_passwords"></a></p>
<h2 id="does-solid-mean-we-wont-need-so-many-passwords">Does Solid mean we won’t need so many passwords?</h2>
<p><strong>Yes</strong>. When you use Solid, you only need to login to your Identity Provider. You can then use applications that interact with your Pod without logging in each of them individually, which is (in our opinion) simpler than having to create accounts on each and every service. However, you will still have to manage what data you would like to share with each application.</p>
<h2 id="is-data-in-my-pod-safe-is-the-pod-encrypted-while-it-is-stored-on-a-providers-system">Is data in my Pod safe? Is the Pod encrypted while it is stored on a provider’s system?</h2>
<p><strong>It depends on the Pod Provider</strong>. Pod providers can be Solid compliant without encrypting the data stored on the Pod providers’ system. If this encryption is important to you, use a Pod provider that does encrypt you data. The Solid standard describes rules for controlling access to the data, but encryption is dependant on the storage system, which is controlled by the Pod Provider.</p>
<h2 id="is-my-data-safe-when-i-use-a-solid-application">Is my data safe when I use a Solid application?</h2>
<p><strong>It depends on the app</strong>. Your data is always encrypted in transit from Pod to app and vice versa. You should always be conscious about which apps you are using the terms of those apps. Solid allows you to selectively share data with specific applications.</p>
<h2 id="is-data-on-my-pod-in-one-physical-place">Is data on my Pod in one physical place?</h2>
<p>Data on your Pod is stored where you choose your Pod to be. You can either store your Pod on a Pod provider or chose to self-host. All data on a single Pod is centrally stored in the same place.</p>
<h2 id="if-all-my-data-is-in-one-place-does-it-not-become-a-vulnerable-target-for-hackers">If all my data is in one place, does it not become a vulnerable target for hackers?</h2>
<p>All of your data will not necessarily be in one place, since you can store pieces of data across several Pods. When it comes to malicious cyber attacks, an attack on a single source of many people’s data is generally more likely than on an individual level.</p>
<h2 id="can-solid-prevent-3rd-parties-from-replicating-data-they-have-legitimate-access-to-">Can Solid prevent 3rd parties from replicating data they have legitimate access to ?</h2>
<p><strong>No</strong>. In Solid, the user grants permission to third-party apps to access data in his/her Pod. When said application has read access over your data, you cannot prevent it from duplicating it (which you cannot do with current applications either). What changes is that you control exactly what information the app has access to, and you can revoke this access at any time. What happens when this access right is revoked is <a href="#copy-after-revoking">another question</a>.</p>
<p><a id="copy-after-revoking"></a></p>
<h2 id="when-i-revoke-access-of-an-application-to-my-data-can-it-still-hold-a-copy-of-the-data-it-previously-accessed">When I revoke access of an application to my data, can it still hold a copy of the data it previously accessed?</h2>
<p><strong>Solid cannot delete the data you already sent out</strong>. As soon as you start using Solid, you will be able to be more deliberate about your data sharing preferences from that point onwards. If you revoke the access of an application to your data at any point in time, and this application previously duplicated the data it had the right to access, the copy is not destroyed. However, the application is no longer able to update this copy according to the modifications you make on your Pod.</p>
<details>
<summary class="has-text-primary">More details</summary>
If you would like to ask for your data to be deleted from other services, In Europe there is a law called the <a href="https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32016R0679&from=EN#d1e2589-1-1">Right to be Forgotten</a> which makes it possible for European citizens to ask for their data to be deleted. You can find template letters and instructions on how to exercise this right <a href="https://www.datarequests.org/blog/sample-letter-gdpr-erasure-request/">here</a>.
</details>
<h2 id="apps-have-my-data-today-if-i-move-this-data-to-solid-will-they-still-have-a-copy-">Apps have my data today. If I move this data to Solid, will they still have a copy ?</h2>
<p><strong>Yes</strong>. Today, other people and organisations have a copy of your data, but you may not. If you join Solid and move your data there, it does not prevent the apps already having your data to keep their copy. However, these apps will have to ask for your authorization to access the new data you store in Solid.</p>
<h2 id="could-the-solid-technology-be-a-tool-to-trace-or-control-criminal-actions">Could the Solid technology be a tool to trace or control criminal actions?</h2>
<p>The law determines the remit of the government to track or control criminal action. The users choice of where to store their Pod would determine which jurisdiction had oversight of the data in that Pod. Expect if the user is based in Europe, in which case the General Data Protection Regulation applies regardless of where the Pod is stored.</p>
<h2 id="as-a-pod-provider-are-you-legally-responsible-for-the-data-you-are-storing">As a Pod provider are you legally responsible for the data you are storing?</h2>
<p>Pod providers have commitments to the individuals and legal entities that they provide services to based on the law of the countries in which the hosting provider is operating. As a Pod provider you should seek professional advice on how to be compliant. As an individual Solid user, you should carefully read the agreement with your hosting provider before agreeing.</p>
<h2 id="could-solid-become-another-tech-giant-monopoly">Could Solid become another tech giant monopoly?</h2>
<p><strong>No</strong>. Solid is <strong>not a company</strong>, it is an open standard. Could it dominate the technical landscape, by being adopted by many? Yes, that would be ideal, so we would have one interoperable Solid web, not many. However, being compliant with Solid does not require developers to ask permission from anyone before building their applications, and does not prevent users from choosing the apps they want, and share their data how they see fit. In that sense, Solid cannot become a monopoly, in the same way that the Web is not considered a tech monopoly.</p>
<h2 id="could-a-solid-app-or-pod-become-another-tech-giant-monopoly">Could a Solid app or Pod become another tech giant monopoly?</h2>
<p><strong>No</strong>. Although an app or Pod could become very popular, with Solid, it is always possible for users to leave to another competitor app or Pod. People want different things so it is unlikely that one size will fit all.</p>
<h2 id="is-it-opt-in-or-opt-out-to-share-my-data-when-using-solid">Is it opt-in or opt-out to share my data when using Solid?</h2>
<p>Opt-in. The default is for you not to share your data. You have to give your active consent to share your data.</p>
<h2 id="what-if-i-dont-want-to-share-my-data-at-all">What if I don’t want to share my data at all?</h2>
<p>Solid makes sure that the minimum amount of data is shared while still providing you with services. Some services do need to know something about you to be able to function, for example, to send you a product the company will need to know where to send that product to. If you don’t want to share your data with these services, you may not be able to use them.</p>
<p>Due to the nature of access control in Solid, if you don’t want to allow any app to access any piece of data on your Pod, you can do just that. If you don’t want a certain app to read data on your Pod, you can not give it any access right. However, it would still be allowed to read the public data on your Pod (if any is available).</p>
<h2 id="who-controls-the-data-of-a-child-using-solid">Who controls the data of a child using Solid?</h2>
<p>The child. The parents or guardians of a child are responsible for managing the data sharing preferences of the child until they reach the legal age of consent in their country of location.</p>
<h2 id="if-i-use-solid-who-controls-my-data-when-i-die">If I use Solid, who controls my data when I die?</h2>
<p>You decide based on your will and your agreement with any hosting provider and app you have been using.</p>
<h2 id="why-do-we-need-solid-when-we-already-have-laws-for-data-protection">Why do we need Solid when we already have laws for data protection?</h2>
<p>Data protection laws in a nutshell tend to promote transparency around data use and insist on informed explicit consent from the user. Solid provides a tools to make this possible.</p>
<h2 id="isnt-having-free-web-services-a-good-exchange-for-giving-access-to-my-data">Isn’t having free Web services a good exchange for giving access to my data?</h2>
<p>That’s up to you, Solid just gives you the choice.</p>
<h2 id="is-it-wise-to-trust-people-to-make-ethical-decisions-on-such-a-complicated-issue">Is it wise to trust people to make ethical decisions on such a complicated issue?</h2>
<p>There is a lot of variation in what people feel to be right and wrong, and ultimately it is down to you to decide what to do with your data. Solid does try to help you make informed choices by providing relevant information and by constantly validating the accuracy of that information.</p>
<h2 id="are-apps-vulnerable-to-an-origin-bypass">Are apps vulnerable to an “Origin” bypass?</h2>
<p>The Solid specification <a href="https://github.com/solid/web-access-control-spec#adding-trusted-web-apps">warns</a> that the “trusted apps” feature is new and experimental, as it is known that <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin">Origin</a> has the common weakness (<a href="https://cwe.mitre.org/data/definitions/346.html">CWE-346</a>) of “origin validation”.</p>
<p>Currently when a user gives a Solid web app access to their Pod, the app Origin is added to that user’s list of trusted apps. The app then receives a token that allows it to interact with the Pod on behalf of the user, and only the Origin included with those interactions is verified using the list of trusted apps.</p>
<p>Although standard browsers automatically include the Origin when they send HTTPS requests, a non-browser client is not required to send one. This means anyone with access to the aforementioned Origin-based token can use non-browser clients to bypass Origin validation for the Pod.</p>
<p>Solutions already are planned to revise and replace this experimental use of Origin, in order to evolve security of the trusted app feature.</p>
</article>
</div>
<aside id="sidebar" class="column is-one-third is-hidden-mobile section">
<div class="menu is-large">
<ul class="menu-list">
<li><a href="#definitions">Definitions</a>
<ul>
<li><a href="#what-exactly-is-personal-data">What exactly is personal data?</a></li>
<li><a href="#what-is-interoperability">What is interoperability?</a></li>
<li><a href="#what-is-a-pod">What is a Pod?</a></li>
<li><a href="#what-is-a-webid">What is a WebID?</a></li>
<li><a href="#how-are-pods-different-from-webids">How are Pods different from WebIDs?</a></li>
</ul>
</li>
<li><a href="#web-standards">Web Standards</a>
<ul>
<li><a href="#how-does-solid-relate-to-other-web-standards">How does Solid relate to other Web standards?</a></li>
</ul>
</li>
<li><a href="#storage">Storage</a>
<ul>
<li><a href="#are-solid-users-expected-to-setup-their-own-servers-and-self-host">Are Solid users expected to setup their own servers and self-host?</a></li>
<li><a href="#can-data-exist-in-more-than-one-pod">Can data exist in more than one Pod?</a></li>
<li><a href="#is-it-possible-to-use-solid-offline-at-least-partially">Is it possible to use Solid offline (at least partially)?</a></li>
<li><a href="#when-i-want-to-leave-a-pod-provider-can-i-take-my-data-with-me">When I want to leave a Pod provider, can I take my data with me?</a></li>
<li><a href="#when-using-solid-how-is-data-stored">When using Solid, how is data stored?</a></li>
</ul>
</li>
<li><a href="#identification">Identification</a>
<ul>
<li><a href="#can-solid-help-store-data-of-an-organisation-not-an-individual">Can Solid help store data of an organisation, not an individual?</a></li>
<li><a href="#i-just-signed-up-but-have-two-profile-locations-what-is-the-difference-between-the-two">I just signed up but have two profile locations, what is the difference between the two?</a></li>
<li><a href="#if-i-join-solid-can-i-stop-using-it-when-i-want">If I join Solid, can I stop using it when I want?</a></li>
</ul>
</li>
<li><a href="#the-business-model">The Business Model</a>
<ul>
<li><a href="#will-pod-providers-get-paid-by-who">Will Pod providers get paid? By who?</a></li>
<li><a href="#if-everyone-used-solid-would-i-lose-my-favourite-internet-services">If everyone used Solid would I lose my favourite internet services?</a></li>
</ul>
</li>
<li><a href="#the-bigger-picture">The Bigger Picture</a>
<ul>
<li><a href="#doesnt-the-data-transfer-project-fix-the-data-concerns">Doesn’t the Data Transfer Project fix the data concerns?</a></li>
<li><a href="#how-to-integrate-ios-and-android-apps-into-solid">How to integrate iOS and Android apps into Solid?</a></li>
<li><a href="#arguably-the-semantic-web-or-linked-data-never-took-off-so-why-is-solid-working-with-it">Arguably the Semantic Web or Linked Data never took off, so why is Solid working with it?</a></li>
<li><a href="#does-solid-use-blockchain">Does Solid use blockchain?</a></li>
</ul>
</li>
<li><a href="#security">Security</a>
<ul>
<li><a href="#does-solid-mean-we-wont-need-so-many-passwords">Does Solid mean we won’t need so many passwords?</a></li>
<li><a href="#is-data-in-my-pod-safe-is-the-pod-encrypted-while-it-is-stored-on-a-providers-system">Is data in my Pod safe? Is the Pod encrypted while it is stored on a provider’s system?</a></li>
<li><a href="#is-my-data-safe-when-i-use-a-solid-application">Is my data safe when I use a Solid application?</a></li>
<li><a href="#is-data-on-my-pod-in-one-physical-place">Is data on my Pod in one physical place?</a></li>
<li><a href="#if-all-my-data-is-in-one-place-does-it-not-become-a-vulnerable-target-for-hackers">If all my data is in one place, does it not become a vulnerable target for hackers?</a></li>
<li><a href="#can-solid-prevent-3rd-parties-from-replicating-data-they-have-legitimate-access-to-">Can Solid prevent 3rd parties from replicating data they have legitimate access to ?</a></li>
<li><a href="#when-i-revoke-access-of-an-application-to-my-data-can-it-still-hold-a-copy-of-the-data-it-previously-accessed">When I revoke access of an application to my data, can it still hold a copy of the data it previously accessed?</a></li>
<li><a href="#apps-have-my-data-today-if-i-move-this-data-to-solid-will-they-still-have-a-copy-">Apps have my data today. If I move this data to Solid, will they still have a copy ?</a></li>
<li><a href="#could-the-solid-technology-be-a-tool-to-trace-or-control-criminal-actions">Could the Solid technology be a tool to trace or control criminal actions?</a></li>
<li><a href="#as-a-pod-provider-are-you-legally-responsible-for-the-data-you-are-storing">As a Pod provider are you legally responsible for the data you are storing?</a></li>
<li><a href="#could-solid-become-another-tech-giant-monopoly">Could Solid become another tech giant monopoly?</a></li>
<li><a href="#could-a-solid-app-or-pod-become-another-tech-giant-monopoly">Could a Solid app or Pod become another tech giant monopoly?</a></li>
<li><a href="#is-it-opt-in-or-opt-out-to-share-my-data-when-using-solid">Is it opt-in or opt-out to share my data when using Solid?</a></li>
<li><a href="#what-if-i-dont-want-to-share-my-data-at-all">What if I don’t want to share my data at all?</a></li>
<li><a href="#who-controls-the-data-of-a-child-using-solid">Who controls the data of a child using Solid?</a></li>
<li><a href="#if-i-use-solid-who-controls-my-data-when-i-die">If I use Solid, who controls my data when I die?</a></li>
<li><a href="#why-do-we-need-solid-when-we-already-have-laws-for-data-protection">Why do we need Solid when we already have laws for data protection?</a></li>
<li><a href="#isnt-having-free-web-services-a-good-exchange-for-giving-access-to-my-data">Isn’t having free Web services a good exchange for giving access to my data?</a></li>
<li><a href="#is-it-wise-to-trust-people-to-make-ethical-decisions-on-such-a-complicated-issue">Is it wise to trust people to make ethical decisions on such a complicated issue?</a></li>
<li><a href="#are-apps-vulnerable-to-an-origin-bypass">Are apps vulnerable to an “Origin” bypass?</a></li>
</ul>
</li>
</ul>
</div>
</aside>
</div>
</div>
</main>
<footer id="footer" class="footer">
<div class="container">
<div class="columns">
<div class="column">
<ul>
<li>
<a class="title is-size-5" href="/">Home</a>
</li>
<li>
<a class="is-size-5" href="/about">About Solid</a>
</li>
<li>
<a class="is-size-5" href="/users">Using Solid</a>
</li>
<li>
<a class="is-size-5" href="/users/get-a-pod">Get a Pod</a>
</li>
<li>
<a class="is-size-5" href="/apps">Solid Apps</a>
</li>
<li>
<a class="is-size-5" href="/team">Team</a>
</li>
<li>
<a class="is-size-5" href="/faqs">FAQs</a>
</li>
<li>
<a class="is-size-5" href="/terms">Terms of Use</a>
</li>
<li>
<a class="is-size-5" href="https://github.com/solid/process/blob/main/code-of-conduct.md">Code of Conduct</a>
</li>
</ul>
</div>
<div class="column">
<ul>
<li>
<span class="title is-size-5">What's New</span>
</li>
<li>
<a class="is-size-5" href="/newsletter">This Month in Solid</a>
</li>
<li>
<a class="is-size-5" href="/events">Solid Events</a>
</li>
<li>
<a class="is-size-5" href="/press">Press</a>
</li>
</ul>
</div>
<div class="column">
<ul>
<li>
<a class="title is-size-5" href="/developers">Developers</a>
</li>
<li>
<a class="is-size-5" href="/developers/tutorials/getting-started">Getting Started</a>
</li>
<li>
<a class="is-size-5" href="https://forum.solidproject.org">Forum</a>
</li>
</ul>
</div>
<div class="column">
<ul>
<li>
<span class="title is-size-5">More</span>
</li>
<li>
<a class="is-size-5" href="/specification">Specification</a>
</li>
<li>
<a class="is-size-5" href="/license">License</a>
</li>
<li>
<a class="is-size-5" href="/logo-usage-guidelines">Logo usage guidelines</a>
</li>
<li>
<a class="is-size-5" href="https://github.com/solid/solidproject.org/issues/new">Website feedback</a>
</li>
</ul>
</div>
</div>
</div>
<nav class="navbar" role="navigation" aria-label="main navigation">
<div class="navbar-brand">
<a class="navbar-item" href="/">
<img
src="/assets/img/solid-emblem.svg"
alt="[Solid logo]"
/>
</a>
<a class="navbar-item is-hidden-mobile" href="mailto:info@solidproject.org">
info@solidproject.org
</a>
<a class="navbar-item is-size-3-mobile is-hidden-tablet" href="mailto:info@solidproject.org" aria-label="info@solidproject.org">
@
</a>
<a class="navbar-item" href="https://github.com/solid/" title="Solid on GitHub">
<span class="image is-24x24">
<img
src="/assets/img/fontawesome-free-5.11.2-web/svgs/brands/github.svg"
alt="GitHub"
class="brand-icon"
/>
</span>
</a>
<a class="navbar-item" href="https://twitter.com/project_solid" title="Solid on Twitter">
<span class="image is-24x24">
<img
src="/assets/img/fontawesome-free-5.11.2-web/svgs/brands/twitter.svg"
alt="Twitter"
class="brand-icon"
/>
</span>
</a>
<a class="navbar-item" href="https://vimeo.com/solidworld" title="Solid on Vimeo">
<span class="image is-24x24">
<img
src="/assets/img/fontawesome-free-5.11.2-web/svgs/brands/vimeo-v.svg"
alt="Vimeo"
class="brand-icon"
/>
</span>
</a>
</div>
</nav>
</footer>
</body>
</html>