3 ms·

good post. q: so why can't said new system 'work universally' (at least online) by users generating their own "pseudonymous" online identities (name/email/pass

good post. q: so why can't said new system 'work universally' (at least online) by users generating their own "pseudonymous" online identities (name/email/pass/etc) and managing these per site/relying party? the 'generating application' or party has oversight and responsibility for fraud but no others and the user controls key aspects relating to government subpeona type issues. thoughts?

olefoo 18y ago
You're basically describing the status quo; which obviously, does work for the most part. But, there are a couple of elements driving stronger authentication forward; the current lack of a safe and effective cash equivalent for online transactions (anything that is charging a 1-2% transaction fee is not cash equivalent), the desire for executing binding legal documents over the internet (you can in the US have people click [agree] on a web form and be good, but it's hokey and nobody takes it seriously), and the widespread perception that digital crime is endemic. My guess, based on the nature of the industry is that whatever solution we get will be built on a stack that's already widely deployed (x509 certificates) and that it will be tied to the post office since showing your ID documents to a public official will be part of proving who you are.
- gdee 18y ago
  We already have government signed x509 (not 100% sure about this detail) certs here in Spain. They can be used to fill taxes online. Just like you said, "showing your ID documents to a public official will be part of proving who you are". They use local administration offices though.
  - olefoo 18y ago
    I knew switzerland had personal certificates, but not spain; is it common in Europe? I would be curious to know more.
    - gdee 18y ago
      I've no idea if they're common in Europe. They're not common here, and they're available. Common people couldn't be bothered even if they'd knew what they are, not to mention know how to use them. This is a good thing I believe. Hey, I know what they are and how to use them and I still don't bother :)

olefoo 18y ago

You're basically describing the status quo; which obviously, does work for the most part. But, there are a couple of elements driving stronger authentication forward; the current lack of a safe and effective cash equivalent for online transactions (anything that is charging a 1-2% transaction fee is not cash equivalent), the desire for executing binding legal documents over the internet (you can in the US have people click [agree] on a web form and be good, but it's hokey and nobody takes it seriously), and the widespread perception that digital crime is endemic. My guess, based on the nature of the industry is that whatever solution we get will be built on a stack that's already widely deployed (x509 certificates) and that it will be tied to the post office since showing your ID documents to a public official will be part of proving who you are.

gdee 18y ago
We already have government signed x509 (not 100% sure about this detail) certs here in Spain. They can be used to fill taxes online. Just like you said, "showing your ID documents to a public official will be part of proving who you are". They use local administration offices though.
- olefoo 18y ago
  I knew switzerland had personal certificates, but not spain; is it common in Europe? I would be curious to know more.
  - gdee 18y ago
    I've no idea if they're common in Europe. They're not common here, and they're available. Common people couldn't be bothered even if they'd knew what they are, not to mention know how to use them. This is a good thing I believe. Hey, I know what they are and how to use them and I still don't bother :)