2 ms·
> This obviously can't work for international services as they won't trust our ID card issuer. Why not? They don't need to trust the issuer to say "this certif
by Nextgrid 4y ago
> This obviously can't work for international services as they won't trust our ID card issuer.
Why not? They don't need to trust the issuer to say "this certificate is X person", they just need the issuer to say "this certificate is the same person as this previous certificate" (presumably via distinguished name matching).
As long as the issue vouches that it's the same person that initially registered the domain, it should be fine, regardless of whether the actual identity of the person is correct.
- jve 4y agoSorry it can, but just not NOW :) Different countries would have to establish/trust various issuers and such and there would be "supported countries list" resulting in many countries left out etc.
- namibj 4y agoThere's actually an EU standard for using the smartcard functionalities of the ID cards to provide strong authentication/KYC-grade auth. EIDAS, iirc.