21–30 of 55 posts
>ID Card is compulsory >760,000 ID cards will be blocked >in country of 1.3 million >I have no idea how I can declare monthly VAT numbers It is bad but could be worse. People are signing up for MobileID and there is still possible to update ID cards via going to the office. But poor people abroad. Basically they will be cut off from all the services.
>ID Card is compulsory >760,000 ID cards will be blocked >in country of 1.3 million >I have no idea how I can declare monthly VAT numbers It is bad but could be worse. People are signing up for MobileID and there is still possible to update ID cards via going to the office. But poor people abroad. Basically they will be cut off from all the services.
Other nations can watch and learn on Estonia's mistakes. The big question is: can such a scenario (a faulty chip) be completely eliminated?
Earlier quoted context omitted.
More like 3 baskets. Estonians can also use a Mobile ID, where private keys, authentication and signature functions are stored on a special SIM card. More recently, an app based Smart ID was also introduced. If you're on one of those services, the certificate revocation doesn't really affect you.
There is only one basket that is made to look that there are three baskets. To get a Mobile-ID need to have an ID-card with valid certificates. If the certs are revoked you can't activate your Mobile-ID. Also you have to pay a monthly fee for Mobil-ID service. Smart-ID requires that you have an ID-Card or Mobile-ID and more importantly it's practically useless as you can't use it for any government services.
You don't need it all the time, only to sign up. Your argument doesn't quite make sense.
Other governments take note: this is what good electronic security looks like.
Spain does the same. With you ID card chip, you can: - sign your emails digitally - login to secure websites with your id card (bank, DMV, taxes, …). Sometimes you can only do it with the ID card - they opened many of their tools, so you can design your website to allow login with Spain's ID cards (that was a fun project)
Even if not affected, it would be nice to hear an official comment.
I was discussing this with someone from Belgium and we agreed that silence from the Belgian government meant only one thing: nobody used the service. (Specifically: Belgian cards are the older Gemalto generation, thus not affected, like the older Estonian IDs.)
Earlier quoted context omitted.
Spain does the same. With you ID card chip, you can: - sign your emails digitally - login to secure websites with your id card (bank, DMV, taxes, …). Sometimes you can only do it with the ID card - they opened many of their tools, so you can design your website to allow login with Spain's ID cards (that was a fun project)
Were these cards affected? Were there any official notices from authorities? Even if not affected, it would be nice to hear an official comment. I was discussing this with someone from Belgium and we agreed that silence from the Belgian government meant only one thing: nobody used the service. (Specifically: Belgian cards are the older Gemalto generation, thus not affected, like the older Estonian IDs.)
Maybe Spain happens to use ECC keys too.
Earlier quoted context omitted.
Were these cards affected? Were there any official notices from authorities? Even if not affected, it would be nice to hear an official comment. I was discussing this with someone from Belgium and we agreed that silence from the Belgian government meant only one thing: nobody used the service. (Specifically: Belgian cards are the older Gemalto generation, thus not affected, like the older Estonian IDs.)
We have a similar system in Austria and I got curious when ROCA was announced. Turns out the cards here generate ECDSA keys and are thus not affected. Naturally, there was no announcement of any kind, so this took quite a bit of sleuthing to figure out. Maybe Spain happens to use ECC keys too.
New certificates are generated on the chip, and the public part is then transmitted to the government public keys directory.
Earlier quoted context omitted.
There is only one basket that is made to look that there are three baskets. To get a Mobile-ID need to have an ID-card with valid certificates. If the certs are revoked you can't activate your Mobile-ID. Also you have to pay a monthly fee for Mobil-ID service. Smart-ID requires that you have an ID-Card or Mobile-ID and more importantly it's practically useless as you can't use it for any government services.
ID cards have been usable until yesterday and will be again soon. Mine was upgraded and is still useful. You don't need it all the time, only to sign up. Your argument doesn't quite make sense.
estonia id card question: can ANYONE create a website that uses the card to authenticate? Or is it a estonia whitelist of services only?
Pricing is here: https://www.sk.ee/en/services/pricelist/certificate-validati...
So it's not quite as simple as Google or Facebook oAuth. But the government does support the idea that if you want then add this as a login option to your forum for dogs or an e-store for sweaters.
The main value is still in the fact that the authentication gives you the ability to create legally binding contracts that get signed online.
Earlier quoted context omitted.
ID cards have been usable until yesterday and will be again soon. Mine was upgraded and is still useful. You don't need it all the time, only to sign up. Your argument doesn't quite make sense.
If you need another basket to have access to it (even if only initially) then it's not really a separate basket on a national level.
All of this is backed by the "single basket" of people actually showing up in the population registry office...
PS: I see, you have just joined HN to write these unsubstantiated comments.