3 ms·
No, it's not supposed to be secret. It's not like SSN. Aadhar id is just a unique identifier. Your authentication happens through biometrics.
by rohit2412 8y ago
No, it's not supposed to be secret. It's not like SSN. Aadhar id is just a unique identifier. Your authentication happens through biometrics.
- Avamander 8y agoEstonia's system uses crypto to authenticate users to sites/services and the UID is considered public data. How does Aadhar handle online authentication?
- rohit2412 8y agoBiometrics/OTP via mobile phones.
- mtgx 8y agoAnd now we know why it's so broken. None of those methods should be used for true security (especially when you're talking about a billion people). Biometrics are not much better than SSNs - once they're stolen, it's game over (for life). The reality is the government chose biometrics primarily so it can more easily track people. It wasn't to make it easier for them to use banking services.
- rohit2412 8y agoBiometrics as a third factor to password and otp would be ideal. However biometrics as a second factor to otp is good enough, to make it frictionless. If that's why it is broken, then I would be happy with it. Nobody is using fake biometrics to authenticate yet. And even then there is the second factor of otp.
- wiml 8y agoSSN isn't supposed to be secret, either. Neither is your mother's maiden name or whatever. But people use them as authenticators anyway.