The Human.json Protocol: A Decentralized Web of Trust

The web is witnessing the emergence of a fascinating new protocol that embodies the spirit of decentralization and personal connection: human.json. This lightweight specification allows website owners to create a simple JSON file that vouches for other individuals they trust, creating a web of human relationships that exists outside of traditional social media platforms.

The Protocol's Simplicity

The human.json protocol is refreshingly straightforward. A website implements it by creating a /human.json file containing basic information about the site owner and a list of vouches—other websites they endorse or trust. The file includes a version number, the owner's URL, and an array of vouches with URLs and timestamps. To make discovery easier, sites can also include a <link rel="human-json" href="/human.json"> element in their HTML head.

This simplicity is the protocol's strength. Unlike complex social networks with proprietary APIs and algorithms, human.json is just a file on a server that anyone can read, write, or implement without permission. It's the web at its most fundamental—text files linked together by relationships.

Building Trust Networks

What makes human.json compelling is how it enables the creation of trust networks. When you vouch for someone by adding their URL to your human.json file, you're essentially saying "I know this person, and I consider them part of my web community." These vouches can be one-way or mutual, creating a graph of human relationships that's transparent and verifiable.

Seth Larson's implementation demonstrates this beautifully. By parsing his RSS subscriptions to automatically discover which sites implement human.json, he's created a system that keeps his vouches current as more people adopt the protocol. This approach transforms his RSS reader from a simple content aggregator into a trust-discovery engine.

The two sites already discovered through this method—Evan Hahn's and Gina Häußge's—represent the early adopters who are seeding this new web of trust. Each implementation adds another node to the network, making it more valuable for everyone involved.

Technical Implementation

Larson's Python script showcases practical implementation details. Using BeautifulSoup to parse HTML for <link rel="human-json"> elements allows for flexible discovery beyond just predictable /human.json paths. The script handles canonicalization by respecting the URL specified in each discovered human.json file, ensuring consistency in how sites are referenced.

The use of OPML files for feed management demonstrates how existing web standards can interoperate with new protocols. RSS, a decades-old format, becomes the discovery mechanism for a contemporary trust network. This compatibility with existing tools lowers the barrier to entry and leverages infrastructure that many already maintain.

The Philosophy Behind the Protocol

Human.json represents a return to the web's original ethos. In the early days of the internet, personal websites linked to each other organically, creating communities based on shared interests and mutual respect. Over time, centralized platforms have intermediated these relationships, often for profit.

This protocol is a quiet rebellion against that centralization. It says that trust can be expressed through simple files on personal servers, that relationships don't need corporate platforms to validate them, and that the web can still be a place for direct human connection. The fact that Larson doesn't plan to use the browser extension himself but values others using the data speaks to a community-oriented mindset that prioritizes collective benefit over individual utility.

Challenges and Considerations

Like any decentralized system, human.json faces challenges. The network effect is crucial—the protocol becomes more valuable as more people adopt it, but requires initial adoption to reach that tipping point. There's also the question of spam and abuse: what prevents someone from vouching for thousands of random sites to game the system?

The protocol's simplicity might be both its strength and weakness here. Without built-in mechanisms for verification or reputation, it relies on the social costs of dishonesty. If you vouch for someone inappropriately, your own credibility in the network diminishes. This social enforcement mechanism works best in smaller, more connected communities.

The Future of Decentralized Trust

Human.json sits at an interesting intersection of several web trends: the IndieWeb movement's emphasis on personal ownership, the growing skepticism of centralized social media, and the renaissance of simple, interoperable protocols. It's part of a broader recognition that the web's original architecture—distributed, open, and protocol-based—might be the best way to build resilient online communities.

The protocol's success will likely depend on whether it can solve real problems for its users. For content creators, it might provide a way to signal credibility and build community outside algorithmic platforms. For readers, it could offer a human-curated alternative to recommendation algorithms. For the web as a whole, it represents a step toward re-decentralization.

As more people implement human.json, we might see it evolve. Perhaps verification mechanisms will emerge, or tools for visualizing the trust network will be built. The protocol's simplicity makes it adaptable to these extensions without breaking compatibility.

Joining the Network

The barrier to entry is intentionally low. If you maintain a personal website, implementing human.json requires creating a single JSON file and adding a link element to your HTML. The script Larson provides shows how to automate discovery from RSS feeds, but manual addition works just as well for smaller networks.

For those already maintaining personal sites and RSS feeds, human.json represents a small addition with potentially meaningful impact. It's a way to strengthen the indie web community, to create more direct connections between creators, and to participate in a web that's more human and less corporate.

The beauty of human.json is that it doesn't require everyone to participate to be valuable. Even a small network of trusted sites can provide meaningful connections and discovery. As Larson suggests, if you implement it and he follows you via RSS, you'll appear in his network automatically. This organic growth model—one vouch at a time, one connection at a time—mirrors how trust works in the physical world.

In an era of increasing centralization and algorithmic mediation, human.json offers a refreshing alternative: a protocol so simple it's almost elegant, a network so distributed it's almost invisible, and a system of trust so human it's almost revolutionary.