News for hackers. Stuff that matters.

A comment on OAuth 3. Parent comment

Re:OAuth 3 by chrisshroba on Thursday October 22, 2020 @10:29AM (#24858397)
Interesting! Why does the distinction of a country matter here? I mean - why would using client side certs be something a country as a whole uses, as opposed to a certain type of company or something? Does it have to do with some sort of national firewalls or anti-encryption laws?
[ Parent | on HN ]
Re:OAuth 3 by LilBytes on Thursday October 22, 2020 @10:39AM (#24858479)
Estonia went electric everything for... Well. Almost everything.

https://en.m.wikipedia.org/wiki/Digital_signature_in_Estonia

https://e-estonia.com/solutions/e-identity/

[ Parent | on HN ]
Re:OAuth 3 by chrisshroba on Thursday October 22, 2020 @11:08AM (#24858825)
Cool! Thanks for the links.
[ Parent | on HN ]
Re:OAuth 3 by tarjei on Thursday October 22, 2020 @10:44AM (#24858522)
Some countries implement verified authentication schemes for their inhabitants that can be linked to both government and private services.

I.e. you have one login to use when filing taxes, getting health data, social security, interacting with your local school etc.

[ Parent | on HN ]
Re:OAuth 3 by Avamander on Thursday October 22, 2020 @02:41PM (#24861690)
It has to do with widespread deployment and a central trust authority - that the specific citizen holding the specific citizen's cert. Service providers don't have to deal with the massive pain that is identity verification, there's no cumbersome stuff like faxing someone a gas bill to prove their identity.
[ Parent | on HN ]