Hacker News Reader

Comment by isodev | Hacker News Reader

The part of the eIDAS that's problematic is the enforced browser certificate configuration which is just one aspect of the whole thing (and probably will be removed from the final version).

Conspiracy theories aside, having my electronic id recognized anywhere in the EU will save a lot of "scan and upload a PDF of your ID" moments. Not to mention the convenience of managing access to my data from the comfort of my sofa.

View on HN

I agree with that. Several countries already have their own electronic ID - Estonia, Netherlands (they have a digital wallet app available on F-Droid), Italy.

This is just standardization, which is a benefit.

The eIDAS problem is not even about having a root certificate in place but severely lowering the bar for the security aspects of the root certificates and mandating browsers to accept it even if those certificates use weak cryptographic algorithms.

Funny how when it comes to EU themselves, it OK to skimp on the security. But when it us, we have to abide by 1000x different EN certs, that are either outdated, unreasonable or unnecessary. In general, I am losing my trust and positive view on EU..

Don't buy the simplified narrative... it's a complex process and this is far from a final text. Moreover, the legislative bodies legislate principles, the implementation still will need to be done by technical experts in a secure way.

Scanning and uploading PDF feels just crazy... The scans pictures and whatever can be stored, and with modern photo edits even reused.

Single one-time authentication flow makes so much more sense from security viewpoint.

Reply on news.ycombinator.com