3 ms·
And how is the general public supposed to verify that the IdP and checking service aren't collaborating? If it is possible for a checking service to create a lo
by crote 1y ago
And how is the general public supposed to verify that the IdP and checking service aren't collaborating? If it is possible for a checking service to create a log, given how Big Tech has been treating user data, how can we ever trust that they aren't logging everyone's data?
Reputation is irrelevant. Everyone is trustworthy - until they are not. The dark web is filled with data leaks from reputable parties.
- ivan_gammel 1y agoHow general public is supposed to believe that lawyers do not collaborate with prosecutors? The trust has to be somewhere, so it seems quite natural that the most trustworthy entity is the one whose sole reason to exist is to protect your data.