Live data from Hacker News

German implementation of eIDAS will require an Apple/Google account to function

bmi.usercontent.opencode.de

131–140 of 674 posts

Re: German implementation of eIDAS will require an Apple/Google account to function

#131
Self Sovereign Identity (aka SSI) is the only way out of those identity sovereignty issues. It shouldn't be acceptable that your identity depends on anything or anyone. It should just be your identity.

A paper or certificate can prove an entity trusts your identity to be but that shouldn't be your identity.

You just are. Not your google Id, not your Apple Id either of course.

Governments are lame.

Re: German implementation of eIDAS will require an Apple/Google account to function

#132
post #62
post #30

I am shocked that there isn’t more opposition from the general public to policies like this that erode privacy and freedom. I am a parent and can appreciate the need to control what children do on the internet, but at some point parents need to parent. I fear we’re giving up a lot of freedom and adding unneeded complexity under the guise of keeping children safe.

I think because most people, even tech savvy ones don’t understand how this might effect their lives. It’s too abstract. At least how it’s portrayed here. Contrast that with chat control. My government can read my WhatsApp messages? Not good! What’s the non-technical narrative here?

> Write too many color emojis in a row on a YouTube livestream chat

> Get banned from society for life

Re: German implementation of eIDAS will require an Apple/Google account to function

#133
post #30

I am shocked that there isn’t more opposition from the general public to policies like this that erode privacy and freedom. I am a parent and can appreciate the need to control what children do on the internet, but at some point parents need to parent. I fear we’re giving up a lot of freedom and adding unneeded complexity under the guise of keeping children safe.

This is because the EU is basically designed as a lobbying platform. Note that lobbying by its own citizen is possible and welcome but expensive and require a some coordination, so basically foreign actors and big corporations are dominating. This is not a secret, the process is actually very transparent but it is "hidden" in all the documents nobody really want to dig into.

Also the EU and all those states are also highly incompetent and pretty much only depends on low quality contractors. For example there is very little discussion and info about the fact that the EU digital infrastructure just got owned by what seems to be a random hacker group [0].

- [0] https://cyberalert.com.pl/articles/shinyhunters-eu-europa-br...

Re: German implementation of eIDAS will require an Apple/Google account to function

#134
ISO7816 (smartcard) has existed for nearly 4 decades as the standard secure identity card, widely used by the banking industry among others. Very unintrusive and not hostile beyond needing to carry a little chip. If governments want a national ID, they could just give everyone one of those.

Re: German implementation of eIDAS will require an Apple/Google account to function

#135

It makes no sense. eIDAS 2.0 specs don't require specific hardware [0]. They basically store verifiable credentials [1] and any other cryptographically signed attestations. This feels like laziness from German implementers, as they don't want to (quoting the spec literally) "implement a mechanism allowing the User to verify the authenticity of the Wallet Unit". 0: https://eudi.dev/latest/architecture-and-reference-fr…

Look at reference implementation. Maintainers resist removing google dependency for no good apparent reason. An if there is persistence without reason - there is a reason.

https://github.com/eu-digital-identity-wallet/eudi-app-andro...

Re: German implementation of eIDAS will require an Apple/Google account to function

#136
post #55
post #30

I am shocked that there isn’t more opposition from the general public to policies like this that erode privacy and freedom. I am a parent and can appreciate the need to control what children do on the internet, but at some point parents need to parent. I fear we’re giving up a lot of freedom and adding unneeded complexity under the guise of keeping children safe.

Germany is distracted with its version of “the gun debate” aka speed limits. Like every school shooting, every energy crisis brings opportunity to saturate the airwaves with shallow noise that gets people overly upset and they’ll ignore everything else. Every player on both sides is abusing this mechanic for all eternity.

Nobody is seriously discussing speed limits right now ...

Re: German implementation of eIDAS will require an Apple/Google account to function

#137
It seems that many Android devices won't safisfy the requirements, even when using a device approved by Google:

> MEETS_STRONG_INTEGRITY also includes the requirement that the device has received a security patch _within the last 12 months_

Good luck with that.

Re: German implementation of eIDAS will require an Apple/Google account to function

#138
post #88
post #25

All these requirements for specific hardware and software are ridiculous. Let every citizen use whatever computer they want. It should be up to the user to secure themselves. Authentication should only require a password or a key pair. If the user wants more security, they can set up TOTP or buy a security dongle or something. It's also ridiculous how it seems we've forgotten computers other than smartphones exist an…

The current policy trend in the EU is definitely not based on the principle of each user evaluating their own risk. On the contrary, service providers like financial institutes and identity providers have the responsibility to keep users safe, and more and more regulation will be made. The natural consequence is restricting which platforms are supported.

> The current policy trend in the EU is definitely not based on the principle of each user evaluating their own risk.

Yes and if you look back this is not new. Just look at the extraordinary restrictions that apply to:

- What houses you can build,

- What vehicle you can drive,

- What food you can grow and sell.

The result is real estate has become unaffordable for younger people, our car industry is being annihilated, and the agriculture sector hold by a string.

The digital realm enjoyed an unusual level freedom until now because the silent and boomer generations in charge in the EU understood nothing about it.

Now that the EU is getting involved in "computers" we are starting to understand why peasants have been protesting in Brussels and calling those people insane for decades.

Re: German implementation of eIDAS will require an Apple/Google account to function

#139
post #88
post #25

All these requirements for specific hardware and software are ridiculous. Let every citizen use whatever computer they want. It should be up to the user to secure themselves. Authentication should only require a password or a key pair. If the user wants more security, they can set up TOTP or buy a security dongle or something. It's also ridiculous how it seems we've forgotten computers other than smartphones exist an…

The current policy trend in the EU is definitely not based on the principle of each user evaluating their own risk. On the contrary, service providers like financial institutes and identity providers have the responsibility to keep users safe, and more and more regulation will be made. The natural consequence is restricting which platforms are supported.

"Legislation will continue until morale improves."

The regulations sometimes feel like additional burden of the user, but not for the manufacturers (aside for the attestation logic); consider:

> (MEETS_STRONG_INTEGRITY requires a security patch in the last 12 months)

Think about how this essentially codifies planned obsolescence due to not forcing the manufacturers to maintain the devices for life.

Re: German implementation of eIDAS will require an Apple/Google account to function

#140
post #30

I am shocked that there isn’t more opposition from the general public to policies like this that erode privacy and freedom. I am a parent and can appreciate the need to control what children do on the internet, but at some point parents need to parent. I fear we’re giving up a lot of freedom and adding unneeded complexity under the guise of keeping children safe.

Because it requires tech iCal knowledge which 99% of the population don't have.
Post reply on HN