11–20 of 55 posts
Other governments take note: this is what good electronic security looks like.
Other governments take note his is what putting all your eggs in one basket looks like.
Other governments take note: this is what good electronic security looks like.
Other governments take note his is what putting all your eggs in one basket looks like.
Other governments take note: this is what good electronic security looks like.
Other governments take note his is what putting all your eggs in one basket looks like.
Earlier quoted context omitted.
Other governments take note his is what putting all your eggs in one basket looks like.
More like 3 baskets. Estonians can also use a Mobile ID, where private keys, authentication and signature functions are stored on a special SIM card. More recently, an app based Smart ID was also introduced. If you're on one of those services, the certificate revocation doesn't really affect you.
Estonian ID card uses 2048 byte keys which means generating a private key from a public key takes 140.8 CPU years which is quite fast/trivial/cheap using a distributed approach (botnet, your already existing HW that you use for mining etc).. considering the implications.
https://www.schneier.com/blog/archives/2017/09/security_flaw...
>ID Card is compulsory >760,000 ID cards will be blocked >in country of 1.3 million >I have no idea how I can declare monthly VAT numbers It is bad but could be worse. People are signing up for MobileID and there is still possible to update ID cards via going to the office. But poor people abroad. Basically they will be cut off from all the services.
Earlier quoted context omitted.
Other governments take note his is what putting all your eggs in one basket looks like.
More like 3 baskets. Estonians can also use a Mobile ID, where private keys, authentication and signature functions are stored on a special SIM card. More recently, an app based Smart ID was also introduced. If you're on one of those services, the certificate revocation doesn't really affect you.
AFAIK they're working on it to get it to the same level so you could give official signatures and log into govt services etc using that as well.
This is fallout from the Infineon private key weakness, isn't it?
http://news.err.ee/640385/government-to-close-id-card-certif... "Information System Authority (RIA) Director General Taimar Peterkop likewise confirmed that the threat assessment had changed after the research published by the Czech researchers on Monday revealed that the security flaw affecting Estonian ID cards is easier to exploit than previously believed." is what you are reffering to "the research published by t…
Earlier quoted context omitted.
Other governments take note his is what putting all your eggs in one basket looks like.
More like 3 baskets. Estonians can also use a Mobile ID, where private keys, authentication and signature functions are stored on a special SIM card. More recently, an app based Smart ID was also introduced. If you're on one of those services, the certificate revocation doesn't really affect you.