3 ms·
What are the downsides of EIDAS? They’re widely accepted and used in my home country and I personally have a great experience, although I wish there was a way I
by tW4r 6y ago
What are the downsides of EIDAS? They’re widely accepted and used in my home country and I personally have a great experience, although I wish there was a way I could generate my own private key and or at least acquire it so I could script my own solutions rather than depending on third party providers
- corty 6y agoMost of EIDAS is quite fine, but there are really stupid ideas in there. Remote signatures are signatures where the key user is not the key owner. The key is located with some service provider who signs with the user's key on request. The security of this is as useless as it sounds, but for many situations here in Germany it is the only option because there are no officially accredited providers for signature card certificates anymore. Therefore it is all the bother of digital signatures with the insecurity of analogue signature stamps...
- tW4r 6y agoOh yes that is exactly what I meant by not having access to the keys, I use one of such services myself. I do however consider them a bit more secure than signature stamps as should the provider become compromised, their upstream certificate would be revoked, to my understanding this would invalidate all of the signatures. The same as any CA