4 ms·
Why didn't the Adhaar creators not go with PKI like Estonia did?
by Avamander 8y ago
Why didn't the Adhaar creators not go with PKI like Estonia did?
- rohit2412 8y agoTruthfully estonia's id looks weak too. Stealing an ID is easier than stealing and impersonating biometrics.
- Lazare 8y agoBiometrics are highly problematic in this context. IF someone steals your private key, you can jump through some hoops and get a new one issued, and regain control over your identity. If someone steals your biometric data (and that is a thing that can happen through a variety of methods), there's no form you can fill out be issued new retinas. Your identity is permanently compromised. A moderate increase in security[1] in the average case in exchange for catastrophic failure modes isn't good tradeoff. (And given the very, very troubled history of biometric security, I'm being charitable assuming it's even an increase.)
- Avamander 8y agoStealing an ID and two PIN codes without the user revoking them all. That's quite hard, isn't it?