Hacker News new | ask | show | jobs
by mianos 569 days ago
I highly doubt they have the expertise to implement anything remotely 'cryptographic.' Their level of competence seems stuck in the 1950s, stamping paper forms, while anything more complex is handed off to consultants in Australia. These consultants appear far more interested in lining their pockets than in understanding technology or math.

The far more likely scenario is they piss a couple of hundred billion away on the first company that shows up with a slick-sounding, half-baked platform, claiming it can magically solve all their problems with just a few "minor" tweaks.

I'm an interested party, I have a 13 year old daughter who would benefit from a little less time on social media. But that's my problem, and my belief that these idiots in our government could help me with that is zero percent. I am probably in the .1% of households where dads know more than kids.

(If photometric id comes in, I want to be in the fake moustache business).

2 comments

There is myID (formerly myGovID) which would be the logical vehicle for a government provided age verification service. I've heard (but can't find a source) that it's build on OIDC/OAuth, so extending it to be an IdP exposing only specific claims (ie, age) shouldn't be a huge leap.
myID as it stands is a bit of a farce. It uses OIDC under the hood, but it only supports end users that download the myID app on their smartphone via the Google Play Store or Apple App Store. Security is effectively outsourced to Google and Apple as the user's identity is "pinned" to their smartphone.

Take myGov in contrast which is web-capable and supports users to use a Yubikey or Passkey/Webauthn-capable device to authenticate.

Under the Australian Digital ID scheme myGov will likely be usurped by myID, which is, in my view, an inferior scheme which blatantly ignores basic standards.

I was too right, they already selected a slick sounding half baked platform: https://accscheme.com/