Several projects that can be completed, tested, shipped to production. Once they are all complete, we have a new identity system.

Phase1: New Domain validation of web2 sessions

Phase2: Allow domains to be specified for caps and mentions

Phase3: Revocations, Rotations, Edge Cases

Phase4: Roll out new domain validation techniques

This document is a WIP, not ready for review. Generally just trying to figure out how this can be accomplished in an organized manner, so the product remains stable and the new features can be tested incrementally.