3 ms·
Agree, more to the point, once some attributes are verified, for example age, it shouldn’t require government to reverify. That said, some attributes should req
by O__________O 4y ago
Agree, more to the point, once some attributes are verified, for example age, it shouldn’t require government to reverify. That said, some attributes should require if needed real-time verification, for example if an individual is legally allowed to drive, enter a country, etc.
- LegionMammal978 4y agoWouldn't caching verification data require the endpoints to hold user sessions? Thus, if the government withheld verification services for a user, wouldn't it prevent that user from creating new independent sessions on their current endpoints, as well as preventing that user from verifying on new endpoints?
- O__________O 4y agoNot 100% sure understand you, but believe this comment might address your question: https://news.ycombinator.com/item?id=33133749 https://news.ycombinator.com/item?id=33133749 Ideally, endpoints would not even know the specific authentication provider, but that the authentication came from a authentication service that’s authorized to confirm a given identity and related attributes; for example, being over X age is a binary attribute and numerous entities should be able to authenticate that and it be honored by a jurisdiction similar to how passports are uniform.