Re:Estonia blocks electronic ID cards over identity-theft risk
by dullgiulio on Friday November 03, 2017 @09:10AM
(#15618880)
To be precise: the system offers both identification and authentication (by using two different certificates, with two different pin codes.)
Even if you don't sign-up and whitelist your service you can sign documents or verify other people documents signatures (both online or with a desktop client). There are usage quotas, though.
Re:Estonia blocks electronic ID cards over identity-theft risk
by j_s on Friday November 03, 2017 @09:08AM
(#15618863)
This is paying for revoke checking, right?
Validating the certificate the same way servers validate client certificates should be enough to verify it as a date/time-valid Estonian ID.
Re:Estonia blocks electronic ID cards over identity-theft risk
by AndresAlla on Friday November 03, 2017 @09:20AM
(#15618960)
Yes, this is to use OCSP. You do not have to pay if you download revocation lists manually. Ofcourse lists become stale rather quickly.
Very basic - hello world level - implementation is as simple as enabling client certificate authentication in Apache config.
Pricing is here: https://www.sk.ee/en/services/pricelist/certificate-validati...
So it's not quite as simple as Google or Facebook oAuth. But the government does support the idea that if you want then add this as a login option to your forum for dogs or an e-store for sweaters.
The main value is still in the fact that the authentication gives you the ability to create legally binding contracts that get signed online.