But PKI still doesn‘t solve the „two people who look similar“ attack, right?
All PKI can do is „this photo matches this information“ perfectly.
It cannot do „this person matches this photo“ perfectly.
All PKI can do is „this photo matches this information“ perfectly.
It cannot do „this person matches this photo“ perfectly.
Worst comes to it, I’d opt more for biometric verification provided the software / hardware is produced by a sane entity such as local government and not some seedy nightclub.