I recently moved to Spain and managed to get a digital identity certificate. It seems to be a fairly open implementation, but has a few weird things. It’s jus

I recently moved to Spain and managed to get a digital identity certificate. It seems to be a fairly open implementation, but has a few weird things. It’s just an x509 certificate (in p12 format) that you install into the OS certificate manager and then it is used on various governmental websites to authenticate yourself/sign documents. First weird thing is that there’s no method to recover the key if it’s lost, besides starting from the beginning and going through the physical identity verification process again. The other thing I noticed is that the “configurator” macOS app isn’t a sandboxed/signed app. They even have instructions on how to enable opening app from untrusted sources on their website. I feel they should bite the bullet and get a $100/yr developer account. AFAIK, all the app does is generate the certificate, transmits it to a server (to be signed by the CA after your verification happens) and generates a PIN you need to show when you are showing your physical ID. Once you are verified you enter another code that was emailed to you and it spits out your pk12 file. Anyways, it’s come in handy so I think an EU wide standardized version could be helpful in day to day life.