3 ms·
To everyone from the previous discussion who was absolutely certain everything is agreed and set in stone: that's not how the EU works. There have been multiple
by sofixa 3y ago
To everyone from the previous discussion who was absolutely certain everything is agreed and set in stone: that's not how the EU works. There have been multiple changes since Mozilla's public letter, and there is still at least one trilogues meeting and then the council and parliament votes, so things can still evolve.
That being said, the law is pretty good and will be a net benefit even in it's current state. The Wallet being opt in, without any discrimination possible based on it, the obvious downsides in the lack of strict controls on how user history is handled by member states (unobservability was never on the cards), and also an European appeals process if the local authority is slacking off (cough Ireland cough).
I'm looking forward to having secure reliable EU wide electronic ID. I'm sick of having to upload or send by email/old mail random scans to prove identity, or to have to pay to a cartel of private electronic signature providers. A 21st century solution is well appreciated.
- jruohonen 3y agoThese are all very good reasons, and I also welcome them. I'd like to also submit my education records and whatnot when applying for a job in Europe, and so forth and so on. That said, I have a million reasons about the downsides. Among these is private sector; here, I have little trust that they won't do all they can to abuse the system. Another fundamental issue is the reliance on consent; the majority of people have no understanding whatsoever about what happens or will happen once their consents have been given.
- sofixa 3y agoI think it would be pretty obvious what happens if you get asked "Do you want to share your name, date of birth, email with XYX Private Company". And we still have GDPR, so abusive data collection can be punished, and revocation of consent afterwards is still possible.
- rdm_blackhole 3y agoI don't share your optimism. I use the digital ID systems of 3 different countries quite frequently and only 1 out of 3 is currently working properly. The Australian one is bad, the French one is not that great. The one is Sweden actually works flawlessly most of the time. Most importantly, Who will build this wallet? I am sure it will be a big bloated corporation that will be chosen not because they are the best or because they work is of good quality. We can expect the project going over budget many times and continuous delays and a cool 90's retro feel. I am afraid that it will be so bad that this thing will be dead in the water. Not too mention that it will probably take 5 years before we see a prototype...
- fvdessen 3y agoI think we’ll be able to use the wallet app we want since they should all be compatible.
- rekoil 3y agoBank ID (the Swedish e-identity provider the user I'm replying to is talking about) is one of the primary inspirations for eIDAS from what I understand, but there are several improvements in the eIDAS text as it stands right now, primarily zero-knowledge proofing. I don't share your pessimism about the development time-frame for this, we already have 2 good more-or-less compatible wallets on the market in Sweden, Bank ID and Freja, if the companies behind those want to they could probably compete for becoming the standard implementation in many markets, meaning very little time before it's operational.
- raverbashing 3y agoI also note the following snippet from TFA > The final twist of this story is that only days before the final deal the negotiators agreed to a change in the text that ensures browsers’ freedom to protect domain authentication and the encryption of web traffic in a manner and with the technology they consider most appropriate. In practice, this means browsers will have a way to resist QWACs undermining encryption, by separating them from TLS.