5 ms·
This is an almost* solved problem, depending on how low-friction solution you consider solved. Just use X509 PKI. Have your real world identity issuing agency
by friendzis 7y ago
This is an almost* solved problem, depending on how low-friction solution you consider solved. Just use X509 PKI.
Have your real world identity issuing agency (whatever that is in a specific country) become a CA, issue personal cert and store it in crypto-hardware. Smart-card interface is rarely present (generally requires specific hardware), USB requires drivers.
Heck, the key can even live inside your SIM card if you prove your identity to mobile provider, which you have to if it is a contract anyway. Works well and is easy to use. Can be an attack vector for scams, though. https://en.wikipedia.org/wiki/Mobile_signature https://en.wikipedia.org/wiki/Mobile_signature
- fabianlindfors 7y agoFrom a technical aspect I agree that it's definitely solved! I'm building my service on top of PKI for this reason. The problem lies with the issuing and trust. Many countries do not issue e-IDs and it's not easy for a business to support all the ones that do. Take for example my country, Sweden. Basically every single citizen has an e-ID and it's used for everything. Yet I can't use it if I want to sign up for a non-Swedish service such as Revolut, N26, Transferwise etc.