diff --git a/next.config.ts b/next.config.ts index 769064fa..364eb096 100644 --- a/next.config.ts +++ b/next.config.ts @@ -10,6 +10,22 @@ const nextConfig: NextConfig = { }, ], }, + async headers() { + return [ + { + source: "/(.*)", + headers: [ + { key: "X-Content-Type-Options", value: "nosniff" }, + { key: "Referrer-Policy", value: "strict-origin-when-cross-origin" }, + { key: "X-Frame-Options", value: "DENY" }, + { + key: "Permissions-Policy", + value: "camera=(), microphone=(), geolocation=()", + }, + ], + }, + ]; + }, async redirects() { return [ { diff --git a/public/llms.txt b/public/llms.txt new file mode 100644 index 00000000..55d052f7 --- /dev/null +++ b/public/llms.txt @@ -0,0 +1,26 @@ +# Certified + +> Certified is a passwordless identity platform built on AT Protocol, operated by the Hypercerts Foundation. It lets users create a single account that works across partner applications with full data portability and no vendor lock-in. + +## Main + +- [Home](https://certified.app): Create your Certified identity and use one account across partner apps +- [About](https://certified.app/about): About Certified and the Hypercerts Foundation +- [Terms of Service](https://certified.app/terms): Service terms for Certified and certified.one infrastructure +- [Privacy Policy](https://certified.app/privacy): Data processing practices, GDPR compliance, cookie policy +- [DSA Compliance](https://certified.app/dsa): Digital Services Act compliance information + +## About + +- [Hypercerts Foundation](https://hypercerts.org): Parent organization building open-source protocols for impact funding +- [GitHub](https://github.com/hypercerts-org): Open source repositories for Certified and related projects +- [Twitter](https://x.com/hypercerts): Hypercerts on X/Twitter +- [LinkedIn](https://www.linkedin.com/company/hypercerts): Hypercerts on LinkedIn +- [Bluesky](https://bsky.app/profile/hypercerts.org): Hypercerts on Bluesky + +## Partner Apps + +- [Ma Earth](https://maearth.com): Collective funding for regenerating Earth +- [GainForest](https://gainforest.earth): AI-powered forest monitoring and conservation rewards +- [Simocracy](https://simocracy.org): Democratic governance with verifiable identity +- [Hyperboards](https://hyperboards.org): Visual leaderboards for impact contributions diff --git a/src/app/about/page.tsx b/src/app/about/page.tsx new file mode 100644 index 00000000..4d637490 --- /dev/null +++ b/src/app/about/page.tsx @@ -0,0 +1,235 @@ +import type { Metadata } from "next"; +import Link from "next/link"; + +export const metadata: Metadata = { + title: "About", + description: + "Certified is a passwordless identity platform built on AT Protocol, operated by the Hypercerts Foundation. Learn how Certified works, who builds it, and why portable identity matters.", + alternates: { canonical: "https://certified.app/about" }, + openGraph: { + title: "About — Certified", + description: + "Certified is a passwordless identity platform built on AT Protocol, operated by the Hypercerts Foundation.", + url: "https://certified.app/about", + }, +}; + +export default function AboutPage() { + return ( +
+ Certified is a passwordless identity platform built on{" "} + + AT Protocol + + , the open standard behind Bluesky and a growing ecosystem of decentralized + applications. It lets you create a single account that works across every partner + app — no passwords, no vendor lock-in, and full control over your data. +
++ When you sign up for Certified, you get an AT Protocol identity and a Personal Data + Server (PDS) hosted at certified.one. Your profile, preferences, + and activity travel with you to every app that supports AT Protocol — and + if the app supports Certified directly, you can sign in with just your email, + no password needed. +
++ Sign-in is passwordless: you enter your email, receive a one-time code, and + you're in. Behind the scenes, Certified issues an AT Protocol identity tied to + your account. That identity is cryptographically verifiable and portable — it works + the same whether you're on certified.app, a partner application, or any future + service that speaks AT Protocol. +
++ Your data lives on your Personal Data Server. If you ever want to leave, you can export everything or migrate your + identity to a different PDS provider — no data is locked inside Certified. +
++ AT Protocol (Authenticated Transfer Protocol) is an open, federated protocol for + building social and identity applications. Unlike centralized platforms where one + company controls your account, AT Protocol separates identity from the application + layer. Your identity is yours — verifiable, portable, and independent of any single + service. +
++ Certified builds on AT Protocol to provide a managed, user-friendly entry point: you + get the benefits of decentralized identity without needing to understand the + underlying protocol or run your own infrastructure. +
++ Certified is operated by the{" "} + + Hypercerts Foundation + + , a Delaware nonstock corporation founded in February 2023. The Foundation develops + open infrastructure for the hypercerts ecosystem — tools and protocols that help + track, fund, and reward positive impact. +
++ Certified was created because the hypercerts ecosystem needed a portable identity + layer: a way for users to move between applications while keeping their profile, + contributions, and reputation intact. Rather than build a proprietary login system, + the Foundation chose AT Protocol as the foundation — making Certified interoperable + with a growing network of decentralized applications. +
++ Both Certified and "Sign in with Google" let you use one account across + multiple apps. The key difference is ownership and portability: +
++ Every component of Certified is open source. The application code, the PDS + infrastructure, and the protocol it builds on are all publicly auditable. You can + review the source on{" "} + + GitHub + + . +
++ Security through transparency, not obscurity. If you find an issue, you can report + it directly or submit a fix. +
++ The Personal Data Servers operated by Certified are hosted on cloud infrastructure + located within the European Union. The service is designed to comply with GDPR and + the Digital Services Act. +
++ For more details, see our{" "} + + Privacy Policy + {" "} + and{" "} + + DSA Compliance + {" "} + page. +
+
+ Hypercerts Foundation
+
+ 1209 Orange St.
+
+ Wilmington, DE 19801
+
+ United States
+
+ Email:{" "} + + support@hypercerts.org + +
++ + Bluesky + + {" · "} + + Twitter/X + + {" · "} + + LinkedIn + + {" · "} + + GitHub + +
+- Your identity and data — everywhere you go. -
-+ Your identity and data — everywhere you go. +
+{item.answer}
+Create your account in under a minute.
+