Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

German implementation of eIDAS will require an Apple/Google account to function

bmi.usercontent.opencode.de

Post reply on HN
Print view View original

421–430 of 674 posts

Re: German implementation of eIDAS will require an Apple/Google account to function

#421

Post by argomo »

darccio wrote: post #281
mradalbert wrote: post #135

Earlier quoted context omitted.

Look at reference implementation. Maintainers resist removing google dependency for no good apparent reason. An if there is persistence without reason - there is a reason. https://github.com/eu-digital-identity-wallet/eudi-app-andro...

I don't feel they resist. Quoting them: > We understand your concerns and truly appreciate your suggestions. As previously mentioned, this is not something that is enforced by the reference implementation — these are simply recommendations, not requirements, for any wallet implementer. That said, we recognize that this is a sensitive topic, and we may need to revisit it, even at the level of recommendations. > The RE…

That's the kind of corporate baby-talk I use when I'm trying to resist doing something.

Re: German implementation of eIDAS will require an Apple/Google account to function

#422

Post by dabber21 »

haagch wrote: post #214
webhamster wrote: post #155

German implementer here. We have to use some kind of attestation mechanism per the eIDAS implementing acts. That doesn't work without operating system support. The initial limitation to Google/Android is not great, we know that, and we have support for other OSs on our list (like, e.g., GrapheneOS). It is simply a matter of where we focus our energy at the moment, not that we don't see the issues.

German citizen here. So why is an implementation going forward when you already know it will not serve all citizens? Why are we not refusing to implement this until we know we can make it work on all devices? Personally I recently switched from an AOSP based android without Google Play to Ubuntu Touch. In the future with better hardware support I will probably switch to postmarketOS.

also German here, we have to get rid of the 100% perfection at launch expectation its crippling this country

Re: German implementation of eIDAS will require an Apple/Google account to function

#423

Post by conception »

dabber21 wrote: post #422
haagch wrote: post #214

Earlier quoted context omitted.

German citizen here. So why is an implementation going forward when you already know it will not serve all citizens? Why are we not refusing to implement this until we know we can make it work on all devices? Personally I recently switched from an AOSP based android without Google Play to Ubuntu Touch. In the future with better hardware support I will probably switch to postmarketOS.

also German here, we have to get rid of the 100% perfection at launch expectation its crippling this country

But things not in the launch can easily be deprioritized as budget issues indefinitely. “Oh why spend the money adding support for just a few people??” will be the line moving forward.

Re: German implementation of eIDAS will require an Apple/Google account to function

#424

Post by NanoCoaster »

jech wrote: post #329
NanoCoaster wrote: post #248

Earlier quoted context omitted.

Will eIDAS be the only way to identify yourself in cases where it's needed, or will we be able to user other mechanisms like the german ID card stuff or an entirely separate alternative? Or to put it another way, is a smartphone required? If not, that would already clear up a lot of issues, I think. EDIT: Whoops, just saw the answer to another comment asking precisely this. So it's not a requirement. Good. Is there a…

One datapoint: at least in practice, it used to be impossible to delete an entry in the French INPI database (trademarks and company names) without eIDAS. It forced me to unearth an old unmodified Android phone (I run LineageOS on my main phone). If you read French: * https://www.plus.transformation.gouv.fr/experiences/4531155_... * https://linuxfr.org/users/jch-2/journaux/l-identite-numeriqu...

Oof, that's disappointing to hear. Thanks though, that's actually quite interesting.

I'm also thinking of keeping an android phone purely for auth purposes, separate from my main one. The world's most overengineered (and probably also less safe) Yubikey.

> If you read French

Let's see how far my five years of French at school will get me. I'm not getting my hopes up ;)

Re: German implementation of eIDAS will require an Apple/Google account to function

#425

Post by conception »

vovavili wrote: post #375
RobotToaster wrote: post #368

Earlier quoted context omitted.

> Do all German hospitals serve vegan food? Can't speak for Germany, but they do in the UK. It would be illegal discrimination against a belief for them not to.

[flagged]

Lol at eating just plants as being expensive. You do know where animals that are eaten get their food right?

Re: German implementation of eIDAS will require an Apple/Google account to function

#426

Post by ramblerman »

dabber21 wrote: post #422
haagch wrote: post #214

Earlier quoted context omitted.

German citizen here. So why is an implementation going forward when you already know it will not serve all citizens? Why are we not refusing to implement this until we know we can make it work on all devices? Personally I recently switched from an AOSP based android without Google Play to Ubuntu Touch. In the future with better hardware support I will probably switch to postmarketOS.

also German here, we have to get rid of the 100% perfection at launch expectation its crippling this country

Taxpayer money project being tied to a dependency on Apple google is 100% counter what that money should be used for.

You are copy pasting a “correct” argument against eu bureaucracy in the absolute wrong space

Re: German implementation of eIDAS will require an Apple/Google account to function

#428

Post by josefx »

dabber21 wrote: post #422
haagch wrote: post #214

Earlier quoted context omitted.

German citizen here. So why is an implementation going forward when you already know it will not serve all citizens? Why are we not refusing to implement this until we know we can make it work on all devices? Personally I recently switched from an AOSP based android without Google Play to Ubuntu Touch. In the future with better hardware support I will probably switch to postmarketOS.

also German here, we have to get rid of the 100% perfection at launch expectation its crippling this country

A 10% goal would be a good first step. Now excuse me while I read some tea leaves to find out if my trains will be on time tomorrow ( spoiler: they wont).

Re: German implementation of eIDAS will require an Apple/Google account to function

#429

Post by Aachen »

NanoCoaster wrote: post #248
webhamster wrote: post #155

German implementer here. We have to use some kind of attestation mechanism per the eIDAS implementing acts. That doesn't work without operating system support. The initial limitation to Google/Android is not great, we know that, and we have support for other OSs on our list (like, e.g., GrapheneOS). It is simply a matter of where we focus our energy at the moment, not that we don't see the issues.

Will eIDAS be the only way to identify yourself in cases where it's needed, or will we be able to user other mechanisms like the german ID card stuff or an entirely separate alternative? Or to put it another way, is a smartphone required? If not, that would already clear up a lot of issues, I think. EDIT: Whoops, just saw the answer to another comment asking precisely this. So it's not a requirement. Good. Is there a…

Also if you are legally required to be able to use some backup mechanism, it can become the de facto requirement

Re: German implementation of eIDAS will require an Apple/Google account to function

#430

Post by Aachen »

subscribed wrote: post #402
vaylian wrote: post #201

Earlier quoted context omitted.

Thank you for chiming in. > We have to use some kind of attestation mechanism per the eIDAS implementing acts. What does this attestation need to prove? Is this only about ensuring that private keys are managed by a secure enclave or a TPM? > we have support for other OSs on our list (like, e.g., GrapheneOS) I appreciate that, even though I am really not enthusiastic of eIDAS. But time will tell. Thank you.

They won't implement alternatives later, they'll be no point if "most of out customers is using either of the major providers". Concerning secure enclave - what other device except iphones and Pixels have it actually safe?

The nfc chips in identity documents
Post reply on HN