5 ms·

What do you mean itsme does not support linux? It's a phone app, you don't need to install anything on your linux machine... However, it's not a good situation

by kabes 4y ago

What do you mean itsme does not support linux? It's a phone app, you don't need to install anything on your linux machine... However, it's not a good situation that a private company gets such a central role. In fact, Belgian government yesterday announced they're going to make their own implementation. Surely there's already eID login, but that's too cumbersome compared to itsme because it's from the pre-smartphone days.

scrollaway 4y ago
Are you talking about this? https://www.brusselstimes.com/belgium/246070/federal-government-working-to-expand-itsme-application https://www.brusselstimes.com/belgium/246070/federal-governm... The Belgian government already has an implementation: https://www.csam.be/en/egov-profile.html https://www.csam.be/en/egov-profile.html I don't use itsme, only CSAM, because itsme does not support Linux: I can't log in with Firefox or Chrome on Linux with my eID. But CSAM is not universally supported. Example of a site that does not support it: https://www.proximus.be/ https://www.proximus.be/ - Major ISP in Belgium)
- sam_lowry_ 4y ago
  Itsme is an authentication token, like eID. You can login to CSAM protected websites on Linux with Firefox or Chromium and with Itsme token running on Android or iPhone. You can also login on Linux with Firefox or Chromium and with your eID card inserted in a properly configured card reader such as ACR-38U.
  - seszett 4y ago
    I'm not sure because I don't use itsme anymore (it stopped working on jailbroken devices a while ago, so I just switched to TOTP auth with CSAM) but if I remember correctly the initial setup of itsme doesn't work on Linux, as it requires a browser plugin for the card reader that doesn't run on Linux. CSAM uses a different browser plugin that does work on Linux.
    - scrollaway 4y ago
      Yes that’s exactly right.
      - sam_lowry_ 4y ago
        I set up itsme on my android phone using linix. This was a couple years ago, so things likely changed for worse since then. P.S. If you use a JB device, you should also use Magisk and be ready to troubleshoot.
  - ploum 4y ago
    Worth mentioning that itsme is a private consortium of several banks and phone operators which explicitely says that data collected will be used for marketing purpose and "research". That you can’t even think of using it if, like me, you are not using a phone operator or one of the few banks which are part of the consortium.
    - seszett 4y ago
      That's not true, in my experience you can even use it if you only have a French phone number and no Belgian bank.
      - ploum 4y ago
        Indeed, they added the ability to create an account with your eid. It was not the case a couple of years ago.
- kabes 4y ago
  > Are you talking about this? Yes, that's what I'm talking about, although brusselstimes seems to report it weirdly (sounds like they want to extend itsme). https://www.standaard.be/cnt/dmf20220627_97617861 https://www.standaard.be/cnt/dmf20220627_97617861 -> They want to replace itsme with something build by the government. > The Belgian government already has an implementation: https://www.csam.be/en/egov-profile.html https://www.csam.be/en/egov-profile.html You're confusing a couple of things here. CSAM isn't an identity provider. It's like a gateway/umbrella to multiple identity providers like eID and itsme. You can have eID authentication without CSAM and vice-versa. It doesn't make sense to claim itsme doesn't support linux. It's only a phone app, you dont need desktop software. I can login to proximus.be using itsme on linux.
  - sam_lowry_ 4y ago
    The worst part af all this government id story that no one talks about is that Belgian government lost control of its Root Certificate Authority. It is now handled by Digicert, a US company.
    - fazgha 4y ago
      Do you have any source for this ? I know that current root certificates are self signed. [0] [0] https://repository.eid.belgium.be/certificates.php https://repository.eid.belgium.be/certificates.php
      - sam_lowry_ 4y ago
        You have to look for trusted store updates, here is the first link I googled in 5 sec. https://bugzilla.mozilla.org/show_bug.cgi?id=1335253 https://bugzilla.mozilla.org/show_bug.cgi?id=1335253
        fazgha 4y ago
        I read the thread and they were discussing about "audit" made by the Belgium government. I double checked the certificates used for ID cards in [0] and all are self-signed. I don't see any link or ownership to "DigiCert". Perhaps the discussion were related to government's websites. Example for Belgium Root CA2 in [0] Certificate: Data: Version: 3 (0x2) Serial Number: 3098404661496965511 (0x2affbe9fa2f0e987) Signature Algorithm: sha1WithRSAEncryption Issuer: C=BE, CN=Belgium Root CA2 Validity Not Before: Oct 4 10:00:00 2007 GMT Not After : Dec 15 08:00:00 2021 GMT Subject: C=BE, CN=Belgium Root CA2 The Belgium Root CA2 in Mozilla discussion is different. Certificate: Data: Version: 3 (0x2) Serial Number: 04:00:00:00:00:01:41:a1:e1:34:ba Signature Algorithm: sha1WithRSAEncryption Issuer: O=Cybertrust, Inc, CN=Cybertrust Global Root Validity Not Before: Oct 10 11:00:00 2013 GMT Not After : May 12 22:59:00 2025 GMT Subject: C=BE, CN=Belgium Root CA2 [0] https://repository.eid.belgium.be/certificates.php?cert=Root&lang=en https://repository.eid.belgium.be/certificates.php?cert=Root...
- thepangolino 4y ago
  Now you're nitpicking. https://www.proximus.be/ https://www.proximus.be/ might not support itsme but it does allow login with user name and password.
mariusor 4y ago
Is it so difficult to conceive that are people out there using phones that run something else instead of Android or iOS? Even linux.

by kabes 4y ago

scrollaway 4y ago

Are you talking about this? https://www.brusselstimes.com/belgium/246070/federal-government-working-to-expand-itsme-application https://www.brusselstimes.com/belgium/246070/federal-governm... The Belgian government already has an implementation: https://www.csam.be/en/egov-profile.html https://www.csam.be/en/egov-profile.html I don't use itsme, only CSAM, because itsme does not support Linux: I can't log in with Firefox or Chrome on Linux with my eID. But CSAM is not universally supported. Example of a site that does not support it: https://www.proximus.be/ https://www.proximus.be/ - Major ISP in Belgium)

sam_lowry_ 4y ago
Itsme is an authentication token, like eID. You can login to CSAM protected websites on Linux with Firefox or Chromium and with Itsme token running on Android or iPhone. You can also login on Linux with Firefox or Chromium and with your eID card inserted in a properly configured card reader such as ACR-38U.
- seszett 4y ago
  I'm not sure because I don't use itsme anymore (it stopped working on jailbroken devices a while ago, so I just switched to TOTP auth with CSAM) but if I remember correctly the initial setup of itsme doesn't work on Linux, as it requires a browser plugin for the card reader that doesn't run on Linux. CSAM uses a different browser plugin that does work on Linux.
  - scrollaway 4y ago
    Yes that’s exactly right.
    - sam_lowry_ 4y ago
      I set up itsme on my android phone using linix. This was a couple years ago, so things likely changed for worse since then. P.S. If you use a JB device, you should also use Magisk and be ready to troubleshoot.
- ploum 4y ago
  Worth mentioning that itsme is a private consortium of several banks and phone operators which explicitely says that data collected will be used for marketing purpose and "research". That you can’t even think of using it if, like me, you are not using a phone operator or one of the few banks which are part of the consortium.
  - seszett 4y ago
    That's not true, in my experience you can even use it if you only have a French phone number and no Belgian bank.
    - ploum 4y ago
      Indeed, they added the ability to create an account with your eid. It was not the case a couple of years ago.
kabes 4y ago
> Are you talking about this? Yes, that's what I'm talking about, although brusselstimes seems to report it weirdly (sounds like they want to extend itsme). https://www.standaard.be/cnt/dmf20220627_97617861 https://www.standaard.be/cnt/dmf20220627_97617861 -> They want to replace itsme with something build by the government. > The Belgian government already has an implementation: https://www.csam.be/en/egov-profile.html https://www.csam.be/en/egov-profile.html You're confusing a couple of things here. CSAM isn't an identity provider. It's like a gateway/umbrella to multiple identity providers like eID and itsme. You can have eID authentication without CSAM and vice-versa. It doesn't make sense to claim itsme doesn't support linux. It's only a phone app, you dont need desktop software. I can login to proximus.be using itsme on linux.
- sam_lowry_ 4y ago
  The worst part af all this government id story that no one talks about is that Belgian government lost control of its Root Certificate Authority. It is now handled by Digicert, a US company.
  - fazgha 4y ago
    Do you have any source for this ? I know that current root certificates are self signed. [0] [0] https://repository.eid.belgium.be/certificates.php https://repository.eid.belgium.be/certificates.php
    - sam_lowry_ 4y ago
      You have to look for trusted store updates, here is the first link I googled in 5 sec. https://bugzilla.mozilla.org/show_bug.cgi?id=1335253 https://bugzilla.mozilla.org/show_bug.cgi?id=1335253
      - fazgha 4y ago
        I read the thread and they were discussing about "audit" made by the Belgium government. I double checked the certificates used for ID cards in [0] and all are self-signed. I don't see any link or ownership to "DigiCert". Perhaps the discussion were related to government's websites. Example for Belgium Root CA2 in [0] Certificate: Data: Version: 3 (0x2) Serial Number: 3098404661496965511 (0x2affbe9fa2f0e987) Signature Algorithm: sha1WithRSAEncryption Issuer: C=BE, CN=Belgium Root CA2 Validity Not Before: Oct 4 10:00:00 2007 GMT Not After : Dec 15 08:00:00 2021 GMT Subject: C=BE, CN=Belgium Root CA2 The Belgium Root CA2 in Mozilla discussion is different. Certificate: Data: Version: 3 (0x2) Serial Number: 04:00:00:00:00:01:41:a1:e1:34:ba Signature Algorithm: sha1WithRSAEncryption Issuer: O=Cybertrust, Inc, CN=Cybertrust Global Root Validity Not Before: Oct 10 11:00:00 2013 GMT Not After : May 12 22:59:00 2025 GMT Subject: C=BE, CN=Belgium Root CA2 [0] https://repository.eid.belgium.be/certificates.php?cert=Root&lang=en https://repository.eid.belgium.be/certificates.php?cert=Root...
thepangolino 4y ago
Now you're nitpicking. https://www.proximus.be/ https://www.proximus.be/ might not support itsme but it does allow login with user name and password.

mariusor 4y ago

Is it so difficult to conceive that are people out there using phones that run something else instead of Android or iOS? Even linux.