5 ms·
The key will obviously need to be stored in a physical token of some kind that's designed to prevent the key from being extracted. Kinda like how U2F and Smart
by Ajedi32 9y ago
The key will obviously need to be stored in a physical token of some kind that's designed to prevent the key from being extracted. Kinda like how U2F and Smart Cards work.
- aaomidi 9y agoAnd somehow you're going to have to accept that fact that people are going to lose their keys. You're going to want to make sure you can properly reissue one to the correct person.
- Ajedi32 9y agoKey issuance and revocation by centralized authorities is a problem the X.509 PKI system has been dealing with for decades now. Shouldn't be too hard to create a similar system for personal identification.
- Kluny 9y agoThis is already a completely solved problem in Scandinavia. You get a key card in the mail full of single use codes. If you lose the card, you call a number and they void the old card and send a new one. If you use all your codes, they send you a new one. It works fine.
- politician 9y agoWhat happens if you lose your key card and your code list?
- Kluny 9y ago"If you lose the card, you call a number and they void the old card and send a new one."
- artursapek 9y agoWhat if you move? How do they verify your address is yours?
- politician 9y agoIs there anything that you can do that causes them to "lose faith" and requires more substantial proof?
- aaomidi 9y agoHow do they know you are who you say you are? What's stopping me from calling them and asking them for a new card on your behalf?
- ptman 9y agoThe mailed code list is being phased out since there's no guarantee somebody hasn't opened your mail, taken a picture of it, and put it back.
- dredmorbius 9y agoBeing replaced by what?