If government is the Certificate Authority of a cryptographic digital ID system, and if the digital ID is used as an authenticator, then therefore the government can impersonate you, do things on your behalf, and access any resources that are 'protected' wherever the digital ID is relied on as an authenticator. It inherently gives them a backdoor into anything that relies on it, as they can always notarize another ID as you.
There could be ways to mitigate risks, but I highly doubt they'll be considered, since it's always the dumbest of person that any of these systems will be engineered to (just as why authentication with banking is just outright pathetic in a lot of areas, where a vast majority of online banking doesn't even support any hardware token auth whatsoever).
The important part is that digital ID isn't used as a routine authenticator, and maybe only for proving identity ONCE when initially setting up an account, and the onus being on the end user to supply the methods they want to authenticate NOT involving the digital ID as a routine authenticator (password + OTP, user-procured hardware token, or whatever else).
arcanicanis
npub1pm…wd4ts
2025-02-06 21:18:04 UTC
in reply to nevent1q…8azp
Author Public Key
npub1pmt6lj9sff80t4fvzn75d3j7g5kk9jjs537keafg0mfgykndymms5wd4tsSeen on
wss://relay.ditto.pubPublished at
2025-02-06 21:18:04 UTCEvent JSON
{
"id": "777f43bc89a9a2fabee1d2c77233d55399e7c1ee7afb08bb6dd32c7a036d74ff",
"pubkey": "0ed7afc8b04a4ef5d52c14fd46c65e452d62ca50a47d6cf5287ed2825a6d26f7",
"created_at": 1738876684,
"kind": 1,
"tags": [
[
"p",
"e4216b6a0bfd4befcf804f9fae90b040bfef0eecbdd6bd091c8ce07a71e4b3ea",
"wss://relay.mostr.pub"
],
[
"p",
"b808d50107cd2557ceab1235027bdbc35049c64cef8c2f3ba1d9ef3d45c603c2",
"wss://relay.mostr.pub"
],
[
"e",
"835784903b227855646f18d408aebcdab77fac517f0c4e41ca9dc0e3c214c66f",
"wss://relay.mostr.pub",
"reply"
],
[
"proxy",
"https://were.social/objects/83dcec31-ca6c-4f73-b8af-163862e8aeeb",
"activitypub"
]
],
"content": "If government is the Certificate Authority of a cryptographic digital ID system, and if the digital ID is used as an authenticator, then therefore the government can impersonate you, do things on your behalf, and access any resources that are 'protected' wherever the digital ID is relied on as an authenticator. It inherently gives them a backdoor into anything that relies on it, as they can always notarize another ID as you.\n\nThere could be ways to mitigate risks, but I highly doubt they'll be considered, since it's always the dumbest of person that any of these systems will be engineered to (just as why authentication with banking is just outright pathetic in a lot of areas, where a vast majority of online banking doesn't even support any hardware token auth whatsoever). \n\nThe important part is that digital ID isn't used as a routine authenticator, and maybe only for proving identity ONCE when initially setting up an account, and the onus being on the end user to supply the methods they want to authenticate NOT involving the digital ID as a routine authenticator (password + OTP, user-procured hardware token, or whatever else).",
"sig": "95a799d9d6741d41ef21a88ecf007072f445489e97379bfa304ec798c2aed260969433696374364cdb7f7574742d7e33b8e5295d05de67632724375669638122"
}