3 ms·
Sidestepping the question of whether Twitter rises to the importance of needing verification, I believe that identity verification is a huge missed opportunity
by janalsncm 3y ago
Sidestepping the question of whether Twitter rises to the importance of needing verification, I believe that identity verification is a huge missed opportunity for banks. There’s no reason why US users should be sending personal info to an Israeli company for anything, especially this.
A bank has traditionally been the place where we keep our most valuable physical assets. They are secured and insured. Security is part of the service they’re providing. Moving to the digital world, banks could also have been a natural place to store digital assets such as identity info, credit info, and email addresses/phone numbers.
Then, instead of every random website asking for this info and storing it for an indeterminate amount of time, the bank would proxy it to them.
Being a “data bank” would be a highly regulated privilege, with license to store this info. Any non-licensed entity would be prohibited from storing things like SSNs. This reduces the attack surface to only the most important entities. As critical infrastructure, these data banks would also receive periodic stress tests, just as physical banks do today.
- hakfoo 3y agoI always found the whole ID situation in the US comical. Using the driver's license as a default document seems like it was an accidental thing. You then get the Department of Motor Vehicles involved in tasks outside their scope (i. e. the parallel non-license ID document), and it guarantees a lack of standardization and then trying to hack it back into place (see: Real ID). We should have had a meaningful federal ID probably from the 1960s if not earlier-- once it became evident we needed some uniform way to identify people. Whatever department ended up owning it would be the obvious place to provide an API collection, which would probably end up looking a bit like oAuth with a variety of different grants (age, address, citizenship, other qualifications) that would be very evident through the login prompt. But that would freak the hell out of the Mark of the Beast people.