“The technology that was intended to free us has become the tool of our own oppression,” he said during a speech at the World Economic Forum in Davos, Switzerland. “The social media that was supposed to bring unity, clarity and democracy have instead given us division, vice and a reactionary agenda.”
Well, in the US we’ve never had a good way to identify individuals. This could be a good tool for any government need that requires an ID. And once it’s standard here, well, might as well use the same over there. It’s a standard, after all.
I’d be very supportive of a public, public key infrastructure and Identity Provider.
They should eventually be necessary for some things…like any official government or online banking business. Essentially anywhere you would expect something to be notarized or witnessed.
But they should be optionally allowed on other services. I wouldn’t accept requiring an official government ID to shitpost on Reddit, but if I were a celebrity and I could use it to officially verify myself on Mastodon, or even Facebook? Sure.
People misunderstand what client certificates are and what they do. They are a pair of keys, private and public. You use the private key to digitally sign (and/or encrypt) a message. The public key (client certificate) is issued by a third-party entity that all involved parties trust (the certificate authority), as proof that it has received a message signed by the same private key in the past.
By storing the private keys on something portable but non-exportable, like a smartcard, they are the “something you have” in multifactor authentication. And by virtue of needing to be protected by a password/pin/passphrase, proof of “something you know”.
It’s the digital equivalent of a state issued ID or driver’s license, and personally I think it’s absurd we don’t have it by now. You technically don’t “need” a state-issued ID to do anything, but they also certainly make modern life a hell of a lot easier.
Exactly. And it’ll be run by X, The Everything Platform.
Something similar already exists. I mean, there’s nothing stopping you from buying a certificate from Digicert or GoDaddy or whatever and sign your emails with it, but you can’t exactly use it to sign on to your bank or IRS.gov.
DoD PKI has the ECA program, though, and it is a requirement to authenticate to a lot of DoD resources.