5 ms·
> I have yet to encounter any real solution to this problem that allows someone to prove they are who they say they are I think the solution is third-party att
by geocar 5y ago
> I have yet to encounter any real solution to this problem that allows someone to prove they are who they say they are
I think the solution is third-party attestation.
The government can offer an identity service - it doesn't need to be linked to your real-person, but could simply require proof of residency (by say, mailing you a postcard that you would bring in), but once established, you could use this service to attest your identity to third-parties.
There are companies that increasingly offer this service (like Facebook, Google, Amazon, and Apple) but I think they struggle to avoid conflicts-of-interest in offering this service, so they make me nervous how popular they are becoming in the US and UK.
Where I live, the government provides a smartcard which you can use with government websites and a few non-government sites, and this is used as a second-factor for making critical changes. If I lose this smartcard, I have to go into a government office with some documentation to start the process of getting a new one (where it will be mailed to me, and I can bring it in with documentation to be activated).
I don't find this onerous; I don't have to use the smartcard to do any "normal" things -- the non-government sites (and some of the government sites) allow me to log in using just a password and a mobile-app, but if I were to lose my phone (or my password), I know I have a government-provided recovery mechanism.
Finally, anticipating a particular antagonist of this idea: As far as I know, the government doesn't actually know what services I use this smartcard with (unless the company shares this information, but we already know Facebook and Google and probably Amazon and Apple do) and I have multiple cards with different identifying details on them, so I think any privacy risk is minimal.
- arcticbull 5y agoI've seen a lot of both private (MGM properties in Vegas, at least Vdara) and public (CA DMV) using id.me for this purpose. It actually works really well.
- geocar 5y agoI believe id.me is a corporation that sells your personal data, and the identity-holder doesn't benefit from id.me selling their data. Their privacy policy makes mention of list-scrubbing services and marketing uses of data, and other shady things that I understand are quite normal in the US, but make me nervous. This is part of what I was referring to by "conflicts of interest": I don't see how any private corporation could possibly be trusted to do this.
- arcticbull 5y agoI agree with you that this is something that should be served either publicly or with extremely strong regulatory oversight. I was pointing them out more from a product perspective, I think the fact that it’s so genuinely useful product validates everything you said.
- bmn__ 5y agoSounds overly complicated. Don't you have id cards in your country?
- geocar 5y agoThe smartcard is an ID card.