4 ms·
> but more secure unique identity data What kind of data? eID pretty much replicates Keybase, except it's concerned with real world identity (matching your gi
by nailer 3y ago
> but more secure unique identity data
What kind of data?
eID pretty much replicates Keybase, except it's concerned with real world identity (matching your given and surname to your pubkey) rather than pseudonymous identity (matching your twitter handle or reddit account or whatever else to your pubkey).
> that would allow the use of A-E-S keys for arbitrary data through a FOSS API.
You can use your ECC (or RSA) keypairs to negotiate an AES or chacha+poly session key. Most cryptosystems do that (ECDHE, or DHE for RSA) now since:
1. session keys are faster (in terms of CPU) than just encrypting with the remote's pubkey.
2. if the session key is stolen, you just get access to that session (perfect forward secrecy).
3. group chats just store the session key encrypted chat, plus copies of the session key encrypted with everyone's pubkey, to save storage.
- aborsy 3y agoSocial Security number, passport number, birth certificate data, drivers license , tax information, etc. Some numbers need to be verified every few years.
- tomrod 3y agoAn OpenPGP key could be the most stable of all identifiers out there!
- lxgr 3y agoWhat if you lose it, or the private key leaks? A public key is a pretty bad identifier by itself. The combination of a good identifier with a public key/certificate binding to it is pretty powerful, though. The US has a good public identifier (SSNs), but they are completely unauthenticated. German arguably has the opposite: Widely available e-signature capable ID cards – but they only bind to your name (and DOB).
- brnt 3y agoNot if Autocrypt has their way! (And I hope they will!)
- numpad0 3y agoThat kind of thing don't exist because it's illegal because it gets people killed and governments toppled. Privacy isn't human right for nothing.
- aaronmdjones 3y agoI'm not sure you understand Germany. They barely emerged from one of the most oppressive surveillance regimes ever created and rightly vowed to make it as difficult as possible to arrive there again; everything you've just described is taboo if not illegal. Even using a dashcam is tightly regulated.