The way the EU could implement this is to mandate only using identity providers can guarantee they will not revoke people's identities, and the only way to make that guarantee watertight is to mandate only identity providers based within the EU.
replyThere are no guarantees unfortunately, just contracts (formal and informal) that can be broken and paths as to what happens when those contracts degrade or fail. Agree with you on mandating EU only idps for those who reside within the EU jurisdiction.
reply> Google and Apple should be legally mandated to federate with nation state identity systems.
replyWith which states?
I'm I'm a citizen of two and live in the third, potentially having eSIM of the fourth?
The same states and countries they integrate with today for digital identity verification. If you have a passport, national ID card, or US state ID or driver's license, you have a government provided digital identity that can bound to and authenticated against. I'm probably missing a government credential in scope, but the backend database lookup is trivial.
replyThe US Login.gov idp is about to roll out identity attestation using your state issued government credential provisioned in your mobile wallet (mDL), for example. I can perform identity proofing and attestation with my digital driver's license and passport in my iPhone Wallet today (at a TSA or CBP checkpoint, for example). Why can I not login to Google and Apple with that identity? It is federated identity management fundementally.
https://zendesk.login.gov/hc/en-us/articles/51945946704148-m...
Putting IDs in mobile wallets is such a minefield without explicit bans on phone searches by law enforcement. Law Enforcement being able to rifle through all your email/bank/medical records because you had a traffic stop is just not acceptable.
replyThe ID can be presented without providing the device to law enforcement. Same UX as a payment, it’s an NFC exchange.
replyWhy does google and apple need a government login? This makes no sense. You do not want private billionaire companies coming anywhere near a government login. If they get to use it, they will lobby to make it less secure to support more datamining.
reply