[Aurornis]

> long as that system recorded no log of who asked it

Two problems with this:

1. Any system which is anonymous becomes trivially abusable. A true anonymous system with no records kept means a single stolen or leaked ID could be used by everyone, defeating the system. You can try to search for and block leaked IDs but that doesn’t stop one kid from copying their 19 year old brother’s ID and using it to authorize the entire school. So these systems gain logging facilities to try to rate limit requests and the politicians don’t like it because it’s too easy to circumvent. They really want ID attached to accounts so there can be some consequences for ID fraud.

2. Routing every request through a government entity will not be anonymous or log-free, no matter how much you want it to be. With everything we know about government intrusion into services in the name of national security, you can’t expect a centralized service that gets access to people’s ID, IP address, and sites they visit to be kept as a special zone for privacy. It would be a top target.

[padjo]

For 1. Can't the attestation result function as an identifier that the service uniquely associates with an account?

For 2. I have sufficient trust in my society that this would be the case or would have significant negative ramifications for the parties involved. Probably not true for all countries.