44 ms·

> PGP only solves that if I already have verified keys, which is the hardest part left unsolved. But you've opened your bank account in person. When you got th

> PGP only solves that if I already have verified keys, which is the hardest part left unsolved. But you've opened your bank account in person. When you got the token to login to the bank website they might as well ask you to sign their certificate since you are there.

joshuaissac 4y ago
> But you've opened your bank account in person. Many banks do not require this. Many do not even have physical branches to visit.
mort96 4y ago
Last time I opened a bank account, I did it by creating an account on their website.
- bombolo 4y ago
  USA I suppose? I guess that's why you have a huge problem of people opening debt under other people's name there, which is a thing that doesn't really happen here.
  - mort96 4y ago
    Norway. I don't believe we have that problem.
  - brnt 4y ago
    Most European countries run proper citizen registries that allow for secure verification of IDs and online opening of bank accounts. Many banks don't require visits anymore. All the same, two factor devices (you can mail them too) are phased out across the blad in favor of mobile apps. Which is nog great.
    - bombolo 4y ago
      mobile authentication is actually in violation of a EU directive. My bank linked that very directive when they retired the physical token in favour of using the phone, saying the bad EU was forcing them to do this money saving step. I couldn't believe it was true, I read the actual text of the directive and it was in fact not true.
      - brnt 4y ago
        Could you point to that directive?
        brnt 4y ago
        Replying in case someone still reads this: in the PSD2 text I could not find anything on the prohibition of mobile auth. Note that I do not mean SMS texts, but using an Android/iOS app as two-factor.
      - account42 4y ago
        Are you sure mobile app-based authentication is in violation and not just SMS-based authentication? Because my bank is using that as the primary method too with the card-based solution costing extra (fixed cost for the reader/tan generator and not monthly cost for the otherwise useless to me card needed for that).

joshuaissac 4y ago

> But you've opened your bank account in person. Many banks do not require this. Many do not even have physical branches to visit.

mort96 4y ago

Last time I opened a bank account, I did it by creating an account on their website.

bombolo 4y ago
USA I suppose? I guess that's why you have a huge problem of people opening debt under other people's name there, which is a thing that doesn't really happen here.
- mort96 4y ago
  Norway. I don't believe we have that problem.
- brnt 4y ago
  Most European countries run proper citizen registries that allow for secure verification of IDs and online opening of bank accounts. Many banks don't require visits anymore. All the same, two factor devices (you can mail them too) are phased out across the blad in favor of mobile apps. Which is nog great.
  - bombolo 4y ago
    mobile authentication is actually in violation of a EU directive. My bank linked that very directive when they retired the physical token in favour of using the phone, saying the bad EU was forcing them to do this money saving step. I couldn't believe it was true, I read the actual text of the directive and it was in fact not true.
    - brnt 4y ago
      Could you point to that directive?
      - brnt 4y ago
        Replying in case someone still reads this: in the PSD2 text I could not find anything on the prohibition of mobile auth. Note that I do not mean SMS texts, but using an Android/iOS app as two-factor.
    - account42 4y ago
      Are you sure mobile app-based authentication is in violation and not just SMS-based authentication? Because my bank is using that as the primary method too with the card-based solution costing extra (fixed cost for the reader/tan generator and not monthly cost for the otherwise useless to me card needed for that).