201–210 of 255 posts
If for no other reason, this is why no closed system will never supplant email. Even the biggest walled gardens like GOOG and FB bow to the power of email identities in the end, as the preferred (maybe even only) way to recover an account.
Earlier quoted context omitted.
Regional domain providers, i.e. .cc country code domains, usually give you legal rights to that domain as long as you pay the fees.
Interesting. So if you want to have some kind of legal protection over your domain, the best bet is buying a .cc domain (from the country you currently live in, I suppose) but no chance when buying a .com, .org domain, right?
I always have this feeling that email is flawed and due for a complete overhaul or replacement - and then I think about it a little harder and I realize that it's actually really good at it's intended purpose. Other than fiddling around the edges with security improvements, spam filtering, and a few other nice-to-haves, there's not really much that need improvement. Some features of email that are nice: - It's comple…
The key part of course is that it is completely open and standardized. Nobody owns it. That is a lesson that we should learn, but is every time forgotten.
No proprietary walled garden can ever come close to the usefulness of email precisely because email is open and standard. With proprietary systems it is inevitable users are subject to the whim of the owner. Might not be able to get accounts, or be arbitrarily banned, or have the app only available on limited platforms, etc.
I've been using email since the late 80s and more importantly I've had the exact same email address since the mid 90s. It's been hosted by multiple providers and the last decade I've been hosting it myself. But always the same domain and address.
No proprietary system can ever compete.
Well, in Estonia, they have a different approach. 1. If you are a citizen or a resident, you get an ID card to use for every public service. It's just a smart card with a government PKI. 2. The public services provide an email account that can only be used within the e-government services. The card is used for accessing those services. 3. The email service accepts either identity number or registry number of the reci…
I always discover how Estonia is really amazing for lots of technology things. AFAIK they are by quite a margin the most advanced country in Europe when in comes to egovernment services. Moreover my (admittedly outside) impression is that they often go for technologically sound solutions not the ones which some large lobby organisation pushed for. This is particularly remarkable considering how small the country is,…
Earlier quoted context omitted.
Yeah but the existence of toilets is mandated by code. The existence of email isn't regulated in any way. Requiring non-commercial (<-- which is doing a lot of work here) email addresses would cause a robust market to appear overnight.
Wait, what do you mean by "non-commercial" ?
Earlier quoted context omitted.
In the Netherlands we do have an inbox from the government ("Berichteninbox" which is optional, the alternative is snailmail), it's coupled to the Digital ID system (DigiD), both are apps and webservices. You can use DigiD to access information on your pension, or healthcare insurance etc. The inbox can be (optionally) coupled to many government organizations and you receive information on taxes for example. I like t…
Using Berichtenbox is a liability. Once you activate the thing, all sorts of (semi-)government communication goes there, but you can't forward it or download it via an open API. You have to use their smartphone app or webapp. The notifications you can set up to a normal email address invariably only say that institution X sent you a message, but never specify the topic. That means you have to login to see if it is ac…
* email notifications are unreliable * messages are considered delivered a week after landing in your data box, regardless of you reading them * old messages are automatically deleted after 90 days (!!!) unless you pay for an expensive and cumbersome archive addon service
Especially point number three makes the whole thing quite dangerous, not just liability - you might get an important message/request from the state while on long vacation/loose the notification and it will self erase - mission impossible style! And you will only find out when you re in trouble for not doing something important later...
Unless you plan to work with the data box daily and manually check the messages its really dangerous to use it.
Well, in Estonia, they have a different approach. 1. If you are a citizen or a resident, you get an ID card to use for every public service. It's just a smart card with a government PKI. 2. The public services provide an email account that can only be used within the e-government services. The card is used for accessing those services. 3. The email service accepts either identity number or registry number of the reci…
I still have a vague hope that the United States Postal Service could be "pivoted" into being a PKI provider and distribute physical tokens to citizens. They already have substantial procedures and infrastructure for verifying identity. There would be problems, to be sure, but I'd much rather get my ubiquitous PKI for citizens from the USPS than the banks or "tech giants".
It’s going to be an uphill battle or impossible as PKIs are too obscure for the average citizen to understand the benefits and any whiff of a federal ID card will be treated like the mark of the communist coup beast.
Earlier quoted context omitted.
This "playing golf with government minister" should be called out for what it is: a probable or possible bribe. It won't be money in a brown paper bag but the result will be the same. It's endemic. We like to think bribery and corruption happens to other countries but there's plenty of it in the UK: it's just higher up the totem pole and largely accepted.
Same thing in the US. I always laugh whenever I see a list of corrupt countries and the US isn't near the top. Codifying bribery into law as lobbying and superpacs doesn't make it not bribery.
It's also because most of those lists are ordered by a "perception index", that is the kind of bullshit that increases if your government does an awareness program and if corruption fighting gets on the news.
Well, in Estonia, they have a different approach. 1. If you are a citizen or a resident, you get an ID card to use for every public service. It's just a smart card with a government PKI. 2. The public services provide an email account that can only be used within the e-government services. The card is used for accessing those services. 3. The email service accepts either identity number or registry number of the reci…
This is the biggest flaw in the design. Tying the ID card to a single identity.
If you're using it with a bank, it needs to be tied to your bank account. If you're using it for physical access control at your company's building, it needs to be tied to your employee account. These are different things, and should be different things, for security.
You don't want a single system for everything. It makes the incentive to break it stronger, so it gets broken more often. It makes the consequences of it getting broken larger, so the damage when it happens multiplies. And it gets integrated into everything, so the amount of time it takes to roll out fixes increases. It's a security nightmare, and it gets polynomially worse the bigger the country is that tries to do it that way. (For reference, the GDP of Estonia is less than one third the revenue of Costco.)