3 ms·
Another possible issue, for any scheme that uses government-issued temporary tokens (even blinded tokens) that have an expiration date: the government could sto
by LegionMammal978 4y ago
Another possible issue, for any scheme that uses government-issued temporary tokens (even blinded tokens) that have an expiration date: the government could stop issuing tokens to a user at any time, preventing them from accessing any gated sites after their current tokens expire.
- O__________O 4y agoAgree, more to the point, once some attributes are verified, for example age, it shouldn’t require government to reverify. That said, some attributes should require if needed real-time verification, for example if an individual is legally allowed to drive, enter a country, etc.
- LegionMammal978 4y agoWouldn't caching verification data require the endpoints to hold user sessions? Thus, if the government withheld verification services for a user, wouldn't it prevent that user from creating new independent sessions on their current endpoints, as well as preventing that user from verifying on new endpoints?
- O__________O 4y agoNot 100% sure understand you, but believe this comment might address your question: https://news.ycombinator.com/item?id=33133749 https://news.ycombinator.com/item?id=33133749 Ideally, endpoints would not even know the specific authentication provider, but that the authentication came from a authentication service that’s authorized to confirm a given identity and related attributes; for example, being over X age is a binary attribute and numerous entities should be able to authenticate that and it be honored by a jurisdiction similar to how passports are uniform.