The Internet was built without an identity layer, which seemed like freedom at first. Now we're retrofitting one—cryptographic, selective, privacy-preserving in theory—and the decisions being made right now in NIST working groups will determine whether we get the identity web we deserve or the surveillance web we're already building.