Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

German implementation of eIDAS will require an Apple/Google account to function

bmi.usercontent.opencode.de

Post reply on HN
Print view View original

121–130 of 674 posts

Re: German implementation of eIDAS will require an Apple/Google account to function

#121

Post by raverbashing »

fpoling wrote: post #116
raverbashing wrote: post #52

Earlier quoted context omitted.

Yes? I don't think it's a bad idea though. If only for bringing the issue to the public And while I do think an alternative would be good, the fact is that protecting the private key is the most important part (for example by keeping it on a smartcard with NFD) - hence why the need for a secure device "but I want to install alternative Android etc etc" yes that's fine - but you know this is a non-secure-(enough) env.

Physical SIM cards are just as secure as the security enclave on the phone. In Norway few years ago banks even used that for secure authentication that worked on dumb phones with local mobile network providers pre-installing the required software on their SIM cards. But then to save cost including the support cost banks stopped and instead started to require a non-rooted Android/iPhone.

Yup, it would be so much better to have it tied to simcard (though it might not help so much with anonymity)

But I think there are still cell operators without sim card

Re: German implementation of eIDAS will require an Apple/Google account to function

#122

Post by NanoCoaster »

wolfi1 wrote: post #90

I'm not quite sure if the German implementation is possible without mobile devices (couldn't find anything on that at first glance). the Austrian implementation on the other hand does not require a mobile device, if you want to do it on a pc you just need a fido2 token

I'm not sure either. I've looked at this other document: https://bmi.usercontent.opencode.de/eudi-wallet/eidas-2.0-ar...

It seems to imply that the already existing way of authenticating via eID, which is the auth chip present on our ID cards, will still work, if I read it correctly? I understand OP's link to refer to a new, alternative system, that can be used without the ID card.

But take this with a grain of salt, I'm not very well informed about the whole topic.

Re: German implementation of eIDAS will require an Apple/Google account to function

#123

Post by randomNumber7 »

lta wrote: post #7

That sounds like a very smart move at the time where Europe realize the US isn't such a gray partner and it's trying to reduce it's critical dependencies on foreign nations tech and infra. Good job. I'm actually very surprised to see this from the germans who have this reputation of great engineering culture

> from the germans who have this reputation of great engineering culture

This was more than 30 years ago. Now we have a great culture of overregulation.

Re: German implementation of eIDAS will require an Apple/Google account to function

#124

Post by thomasingalls »

Europe needs a private European identity provider. Until this happens, Europe will remain a technological vassal state of the US.

These are expensive products, you need depth of expertise and experience to create a system that could compete with the likes of gmail and Microsoft and ... so it's not a wonder that this hasn't happened yet. But pretending like this can be a public service is foolish (too high stakes ~~if~~ when it gets hacked), and pretending like existing providers that offer identity and email are sufficient is equally foolish. Google and ms and apple etc all offer the basics for free, and this is necessary for mass adoption. It will be an expensive project. But necessary, if the eu wants strategic autonomy.

---

Oh and requiring a us based account is not even the most egregious part of this proposal, ffs

Re: German implementation of eIDAS will require an Apple/Google account to function

#125

Post by reddalo »

RandomGerm4n wrote: post #99

I attestation should be abolished altogether. An app should have absolutely no way of knowing what kind of device it’s running on or what changes the user has made to the system. It is up to each individual to ensure the security of their own device. App developers should do no more than offer recommendations. If someone wants to use GrapheneOS, root their device (not recommended), or run the whole thing in an emulat…

Exactly. It's my own device, I can do whatever I please with it. There shouldn't be an automated way for apps to check if my device has been blessed by the US tech giants or not.

Re: German implementation of eIDAS will require an Apple/Google account to function

#126

Post by ruszki »

indrora wrote: post #111
testing22321 wrote: post #72

Earlier quoted context omitted.

What percentage of people have a phone that is not apple or google?

My uncle has lost 4 Google accounts. Two to password loss, one to a fire, one to being banned for crimes against currency (having the audacity to live in several countries with different currencies) The issue isn't the phone, it's that a __government__ is depending on an unregulated private enterprise.

> one to being banned for crimes against currency (having the audacity to live in several countries with different currencies)

What does this "crimes against currency" mean? I live in several countries at once with different currencies, and I never had a problem with this. And top of this, I travel a lot. I have accounts in 5 countries, in 6 currencies. Should I pay attention to something?

Re: German implementation of eIDAS will require an Apple/Google account to function

#127

Post by CalRobert »

lta wrote: post #7

That sounds like a very smart move at the time where Europe realize the US isn't such a gray partner and it's trying to reduce it's critical dependencies on foreign nations tech and infra. Good job. I'm actually very surprised to see this from the germans who have this reputation of great engineering culture

I think the reputation is fading. I know I’d take a Chinese car over a German one.

Re: German implementation of eIDAS will require an Apple/Google account to function

#128

Post by reddalo »

herbst wrote: post #108
not_that_d wrote: post #104

Earlier quoted context omitted.

While true, it influences a lot in the EU

I don't think they influence more than France does. But I don't know, I live in Europe but don't care for the EU

If you live in Europe you should care for the EU: not only it's the reason why there hasn't been a war for 80+ years, but if we can have a voice on the international stage it's because we are united instead of 27 small independent countries.

Re: German implementation of eIDAS will require an Apple/Google account to function

#129

Post by CalRobert »

wqaatwt wrote: post #61
fmajid wrote: post #14

Earlier quoted context omitted.

Ah yes, the fabulous car engineering of Dieselgate.

Well they got caught..

And then they successfully lobbied the EU to water down rules for transitioning to electric.

Re: German implementation of eIDAS will require an Apple/Google account to function

#130

Post by reddalo »

thomasingalls wrote: post #124

Europe needs a private European identity provider. Until this happens, Europe will remain a technological vassal state of the US. These are expensive products, you need depth of expertise and experience to create a system that could compete with the likes of gmail and Microsoft and ... so it's not a wonder that this hasn't happened yet. But pretending like this can be a public service is foolish (too high stakes ~~if…

Not only that, be we also need a European payment system that's not tied to VISA / MasterCard, etc.

We're currently paying a small tax to the US for each card transaction we have.

Post reply on HN