3 ms·
They could tie the identities to governmental identities in a blind manner. The pitfalls are as follows: - the governments can just arbitrarily manufacture id
by perching_aix 5mo ago
They could tie the identities to governmental identities in a blind manner.
The pitfalls are as follows:
- the governments can just arbitrarily manufacture identities
- identities (govt and this) can be stolen
- identities can be misused (coercively or consensually, e.g. by passing on access to another person or automation)
Still would beat the current state of affairs, which is piss-all identity attestation, but then they're not actually doing this. They're scanning official documents and go LGTM + pinky promise. Hard skip.
- pixel_popping 5mo agoWhen sending identity to a remote server in cleartext, you must assume that you are giving away the data associated with it, it's just basic security principles, if the engineers behind this don't care enough to KYC using cryptographic ways which already exists, then you can be sure there is some sort of incompetency and/or malice :) If I browse an http website, then I know that someone could be using the data, if I put my passport somewhere, then I know someone could as well, apparently having thousand of leaks every year isn't enough of a proof to people :/