3 ms·
But PKI still doesn‘t solve the „two people who look similar“ attack, right? All PKI can do is „this photo matches this information“ perfectly. It cannot do „
by axiosgunnar 5y ago
But PKI still doesn‘t solve the „two people who look similar“ attack, right?
All PKI can do is „this photo matches this information“ perfectly.
It cannot do „this person matches this photo“ perfectly.
- phyalow 5y agoArguably PKI can do that exactly if it is paired with a facial recognition toolkit... A slippery slope.
- bdhess 5y agoYou could use the PKI’s revocation capabilities to ensure that each person only had one valid ID.
- axiosgunnar 5y agoYes but what about deliberate borrowing of a PKI from a similar looking friend?
- gruez 5y agoYou need some sort of smart card/secure element to ensure the ID itself can't be duplicated.
- toast0 5y agoDuplication isn't needed if I just borrow a similar enough looking person's id and return it before they notice.
- shalmanese 5y agoYou could have an optional service where the DMV sends you a push notification/SMS every time your ID is scanned.
- hsbauauvhabzb 5y agoYeah correct, but IDs are easily fake able anyway. The purpose of ID is to stop low leve falsification, high level ID forgery involves bribes for . Worst comes to it, I’d opt more for biometric verification provided the software / hardware is produced by a sane entity such as local government and not some seedy nightclub.