Hacker News new | ask | show | jobs
by xoa 1749 days ago
THIS is what strikes me as the use case for this, and 100% absolutely not using it with any interaction with the law. Preferably the only way I ever go through any law interaction with my phone on me is if it's turned off, or at the very very least have used the emergency function to disable Touch ID/Face ID which also discards the transient keys for decrypting storage (and no I don't use iCloud Backup or iCloud Photos). Smartphones and computers at this point fare essentially exocortexes, but the law does not protect them the same way it protects the contents of our minds.

However, there are lots and lots and lots of private interactions where cryptographic assertable proof of identity would be enormously valuable and a big win for privacy, fraud reduction etc, but the other party certainly has zero right or capability to demand your device, go through it and use force against you based on what they find there. Not just in retail but particularly online the state of identity verification in the US is just fucking abysmal even now. Common workarounds include stuff like literally taking a photo of your government ID and then emailing it, which of course is terrible in every respect.

From the description and example screen it appears this offers reasonably fine-grained information options. So if there was a secure generally available API ala Apple Pay wherein sites could simply request the minimum needed like age verification and address verification (obviously I'm supplying the address anyway to have things shipped, but this would help assert that yes that was my address) that could be quite valuable if still imperfect.