2 ms·

Until you know, mass data breaches of said government ID from corporate systems and those AI bots now just use said ID

• b112 3y ago
  Your online ID, doesn't need to be your government ID. It does need to be validated though. That said, this is the same problem you have with loads of other accounts. Be it banks, trading houses, or just compromised meta, X, or whatever accounts. Still, my point wasn't whether or not it would work, but merely that it will happen. Governments will become more and more frustrated with a deluge of propaganda, which makes what we see today seem inconsequential. And I believe this will be their response. And it is already true in many countries. I did say it makes me sad. Not happy.
• mschuster91 3y ago
  Not if done right. Everyone's ID card/drivers license (for the USA) gets an RFID smartcard with a cryptoprocessor and secure storage. Upon first activation (during production) it is seeded with the personal data of the person (name, personal identifier e.g. SSN), generates its own rsa4096/ec keypair, provides the public key to the interface, and gets a certificate signed by a government root CA back. Upon an attempt to log in at a service (using a phone with a companion app), a nonce signed accompanied by a certificate signed by the government root CA gets signed by the private key on card, and that as well as the signed personal data gets provided to the requesting service.