3 ms·
Pretty sure they're just saying "Here's our (web-based) wallet where you have to login with your ID card and sign transactions with your ID card". But that's pr
by Avamander 9y ago
Pretty sure they're just saying "Here's our (web-based) wallet where you have to login with your ID card and sign transactions with your ID card". But that's pretty much as secure as a Yubikey assuming the government doesn't fuck up it's cards or their software again.
- usrme 9y agoIt's worth noting that this wasn't something the government did wrong. The information didn't reach the country's Information System Authority (ISA) through the proper channels, but rather through security researchers who had already informed the manufacturer months prior, though this is contested by the representatives of the manufacturer within the country who stated that they had informed ISA already in June. This may have led people to believe the government just sat on this information, but I don't think this is the case. Thanks to quick acting from everybody involved (aside from Gemalto it seems...) no real downsides existed aside from people having to renew their certificates and PIN numbers, which was no real hassle.