3 ms·
There are a lot services in Sweden that requires that you provide a real authentication by using something called BankId. Basically a personal digital id. This
by AtNightWeCode 5y ago
There are a lot services in Sweden that requires that you provide a real authentication by using something called BankId. Basically a personal digital id. This is the way to go. 100% secure validated users. If there was a function added to make the users anonymous to third party services it would be great.
I work with Cloudflare sites and it is clear that thier current enterprise offerings are hard to tweak to solve attacks without spamming the users with captchas. The captchas are already too complicated for the average user so it is mostly turned off even though it has other consequences. I have to look into this new thing though.
As much as I like the idea of an open Internet to be used by anyone from anywhere. It does simply not work today for a lot of enterprises.
- poisonborz 5y agoAh yeah, instantly zeroing anonimity for most users, while it can be still abused by malicious actors, a great worst of both worlds solution.
- AtNightWeCode 5y agoNot sure how you came to that conclusion from what I said. What I am saying is that in the long run it will be impossible to rely on companies like Cloudflare for security when it comes to users. Over time all services will for security reasons need to either directly or indirectly authenticate all their users. That does not mean that each users identity is provided to each consumer. The open Internet is already dead thanks to Cloudflare, Akamai etc. A lot of European companies use theses services to block China, Russia, TOR, VPN-services and so on.
- poisonborz 5y agoIt just alluded to an internet strictly divided between "verified" single users (persons, regardless if per service) and everyone else (assumed as malicious by default) as a total and unavoidable path. I think the nature of the internet necessitates temporary, limited gatekeepers like CloudFlare, but as long as the legal status and technology keeps maintaining moving targets (like how you can fake your way out with a dedicated ip vpn, or just remain within tor network) this isn't too much of an issue. Anonimity+trust will never be a fully solved problem, and as long as a comfortable level is achievable between willing parties, the status quo remains.