4 ms·

Only physically though. Many years ago, possessing the values on a passport constituted verification. This data was stored and after a significant number of le

Only physically though. Many years ago, possessing the values on a passport constituted verification. This data was stored and after a significant number of leaks, this data alone was useless as it became public knowledge. The next step was requiring a photo of the document. The photos were stored, and after a significant number of leaks, the same thing happened. The next step was ID selfies. Then the same thing happened. Now it’s selfie videos with the ID. This too will become useless when those videos are leaked. It’s a never ending battle. A passport is a physical document and should only be used physically. Online, we need public/private key authentication. It’s the only way.

dzhiurgis 3y ago
> Online, we need public/private key authentication. It’s the only way. Your credit card already has contactless chip and it's been ID verified. So does your smartphone. Why can't we just marry the two together?
ghaff 3y ago
And then private keys will leak. Nothing's perfect. Requiring physical presence is a pain but it's probably tolerable for sufficiently high value transactions. Only works within the US. There's a related process with more hurdles for international.
- LinAGKar 3y ago
  Except, unlike with the other stuff, you don't need to send your private key to anyone to prove you have it
- xvilka 3y ago
  Unlike passport or face it's easy to revoke the old key and issue a new one.
MichaelZuo 3y ago
I assumed this was only in regards to higher value interactions where meeting in person always makes sense. I'm having trouble imagining a scenario where such a high level of assurance for real identity verification is required but is not worthwhile to meet in person. Can you name a few examples?
- Uvix 3y ago
  Opening a new bank account or credit card. Starting remote employment with a company.
- ghaff 3y ago
  Sure. I do stuff with my family's broker in the Philadelphia area who I've never met in person all the time. During COVID, my local broker let me do a big transfer without going into a (probably closed) office--admittedly to another broker who I had transferred to before. In general, I rarely do anything related to financial accounts in person.

dzhiurgis 3y ago

> Online, we need public/private key authentication. It’s the only way. Your credit card already has contactless chip and it's been ID verified. So does your smartphone. Why can't we just marry the two together?

ghaff 3y ago

And then private keys will leak. Nothing's perfect. Requiring physical presence is a pain but it's probably tolerable for sufficiently high value transactions. Only works within the US. There's a related process with more hurdles for international.

LinAGKar 3y ago
Except, unlike with the other stuff, you don't need to send your private key to anyone to prove you have it
xvilka 3y ago
Unlike passport or face it's easy to revoke the old key and issue a new one.

MichaelZuo 3y ago

I assumed this was only in regards to higher value interactions where meeting in person always makes sense. I'm having trouble imagining a scenario where such a high level of assurance for real identity verification is required but is not worthwhile to meet in person. Can you name a few examples?

Uvix 3y ago
Opening a new bank account or credit card. Starting remote employment with a company.
ghaff 3y ago
Sure. I do stuff with my family's broker in the Philadelphia area who I've never met in person all the time. During COVID, my local broker let me do a big transfer without going into a (probably closed) office--admittedly to another broker who I had transferred to before. In general, I rarely do anything related to financial accounts in person.