3 ms·
Biometrics are broken by design. If someone guesses a password, you can change the password. If someone gets a viable replay of a fingerprint or iris scan, yo
by hakfoo 8y ago
Biometrics are broken by design.
If someone guesses a password, you can change the password. If someone gets a viable replay of a fingerprint or iris scan, you can't change it.
I wonder if a formalized "delegation of identity" system could solve the "missing key" problem.
When you have your key, you'd be able to issue a "I trust this person/firm to reliably identify me" certificates to others. This could potentially be trusted friends/family/co-workers or even official "recovery services" that had different means to verify identity.
So if you lose your key down the road, you can bring one of these people along, and the fact they had your certificate, and vouched that they had identified you, and that would be considered legally equivalent to presenting your actual key, or allow the start of a key-reissue process.
- incompatible 8y agoRegistering other people who are able to identify you is an interesting idea, although it would fail for the hermits/paranoid who don't know/trust anybody and who would be screwed if they lost the key.
- incompatible 8y agoOn the other hand, people trusted by other people are not necessarily trustworthy. If desperate or estranged they may sell out their friends/family for a little cash.
- deleted 8y ago[deleted]