Re:Black Hat: GDPR privacy law exploited to reveal personal ...
by rossng on Friday August 09, 2019 @11:26AM
(#20655200)
Of course. There are plenty of different ways to build such a platform (or contract it out) - I'm not advocating any in particular.
The UK has a rather interesting example in the GOV.UK Verify service, which federates the identity verification and authentication out to third parties. The user can then choose which provider (e.g. Barclays, Post Office) they want to prove their identity through. Experian is also one of the providers, which perhaps illustrates some of the flaws with this design...
The UK has a rather interesting example in the GOV.UK Verify service, which federates the identity verification and authentication out to third parties. The user can then choose which provider (e.g. Barclays, Post Office) they want to prove their identity through. Experian is also one of the providers, which perhaps illustrates some of the flaws with this design...