3 ms·
The part of the eIDAS that's problematic is the enforced browser certificate configuration which is just one aspect of the whole thing (and probably will be rem
by isodev 3y ago
The part of the eIDAS that's problematic is the enforced browser certificate configuration which is just one aspect of the whole thing (and probably will be removed from the final version).
Conspiracy theories aside, having my electronic id recognized anywhere in the EU will save a lot of "scan and upload a PDF of your ID" moments. Not to mention the convenience of managing access to my data from the comfort of my sofa.
- Ekaros 3y agoScanning and uploading PDF feels just crazy... The scans pictures and whatever can be stored, and with modern photo edits even reused. Single one-time authentication flow makes so much more sense from security viewpoint.
- xinayder 3y agoI agree with that. Several countries already have their own electronic ID - Estonia, Netherlands (they have a digital wallet app available on F-Droid), Italy. This is just standardization, which is a benefit. The eIDAS problem is not even about having a root certificate in place but severely lowering the bar for the security aspects of the root certificates and mandating browsers to accept it even if those certificates use weak cryptographic algorithms.
- lunarimiso 3y agoFunny how when it comes to EU themselves, it OK to skimp on the security. But when it us, we have to abide by 1000x different EN certs, that are either outdated, unreasonable or unnecessary. In general, I am losing my trust and positive view on EU..
- lock-the-spock 3y agoDon't buy the simplified narrative... it's a complex process and this is far from a final text. Moreover, the legislative bodies legislate principles, the implementation still will need to be done by technical experts in a secure way.