3 ms·
It doesn't need to be a national system. The relying party could give the browser a list of acceptable token providers to choose from, and the browser selects o
by ndriscoll 1y ago
It doesn't need to be a national system. The relying party could give the browser a list of acceptable token providers to choose from, and the browser selects one it knows the user has already registered with, for example. There's no reason a private party couldn't be considered trusted to perform identity verification (e.g. banks have KYC requirements already).
- wmf 1y agoRealistically the only acceptable sources are government. For example in the US you basically need a state ID (driver's license), military ID, or passport. And the state systems are now federally regulated (Real ID).
- deleted 1y ago[deleted]
- ndriscoll 1y agoThe bills I've seen in the US indicate that you need to use a commercially acceptable solution (so don't mandate government), and include regulations for private providers to follow (e.g. that age validators are also barred from retaining information about the validation).
- wmf 1y agoSadly, most companies aren't competent enough to delete data and the government isn't competent to verify whether they delete data or not.
- raxxorraxor 1y agoI would not want my browser to do this shit.