14 ms·

That’s easy to fix. The IdP and the checking service do not have to be the same. The checking service can be a 3rd party that works with IdP verifying facts on

That’s easy to fix. The IdP and the checking service do not have to be the same. The checking service can be a 3rd party that works with IdP verifying facts on behalf of regulated services like porn sites. The job of IdP is to certify the facts and do KYC for checkers to ensure they don’t cheat. The regulated service can ask customer which checker do they use and then ask the checker. The customer may have a long term relationship with preferred checker on a market where multiple checkers exist and reputation matters for being competitive. This way checker is incentivized to maintain privacy and does not have conflicts of interest like the government. Government agencies can still investigate customers but they will need a court order to get the data from checkers.

raxxorraxor 1y ago
In Germany police illegally accessed contact list from apps verifying your vaccination status for corona. I don't see it differently here and it is no use for victims if the courts are included later. The simple reality is that no state is adult enough to handle this responsibility. Why should I accept the berlin internet wall anywhere? Any ecosystem should fight back against such ambitions. If it really is about protecting kids, there could be some easy laws improving their privacy. These are not wanted. As well as there is no political will to restrict tracking for advertising and gambling.
crote 1y ago
And how is the general public supposed to verify that the IdP and checking service aren't collaborating? If it is possible for a checking service to create a log, given how Big Tech has been treating user data, how can we ever trust that they aren't logging everyone's data? Reputation is irrelevant. Everyone is trustworthy - until they are not. The dark web is filled with data leaks from reputable parties.
- ivan_gammel 1y ago
  How general public is supposed to believe that lawyers do not collaborate with prosecutors? The trust has to be somewhere, so it seems quite natural that the most trustworthy entity is the one whose sole reason to exist is to protect your data.

raxxorraxor 1y ago

In Germany police illegally accessed contact list from apps verifying your vaccination status for corona. I don't see it differently here and it is no use for victims if the courts are included later. The simple reality is that no state is adult enough to handle this responsibility. Why should I accept the berlin internet wall anywhere? Any ecosystem should fight back against such ambitions. If it really is about protecting kids, there could be some easy laws improving their privacy. These are not wanted. As well as there is no political will to restrict tracking for advertising and gambling.

crote 1y ago

And how is the general public supposed to verify that the IdP and checking service aren't collaborating? If it is possible for a checking service to create a log, given how Big Tech has been treating user data, how can we ever trust that they aren't logging everyone's data? Reputation is irrelevant. Everyone is trustworthy - until they are not. The dark web is filled with data leaks from reputable parties.

ivan_gammel 1y ago
How general public is supposed to believe that lawyers do not collaborate with prosecutors? The trust has to be somewhere, so it seems quite natural that the most trustworthy entity is the one whose sole reason to exist is to protect your data.