News for hackers. Stuff that matters.

A comment on Three Companies Impersonated Millions to Influence Internet Policy. Parent comment

Re:Three Companies Impersonated Millions to Influence Intern... by M95D on Sunday May 14, 2023 @04:45AM (#35936432)
No. Public/private keys can be under the control of the individual. You only need the public key to be signed by a trusted 3rd party. That only gives them the power to revoke it, but even the revoking can't cancel what you already signed while the key was valid.
[ Parent | on HN ]
Re:Three Companies Impersonated Millions to Influence Intern... by DougN7 on Sunday May 14, 2023 @07:05AM (#35937087)
Imagine your “trusted third party” is or becomes a dictator, who logs all signed keys. This doesn’t solve anything I’m afraid.
[ Parent | on HN ]
Re:Three Companies Impersonated Millions to Influence Intern... by williamcotton on Sunday May 14, 2023 @07:33AM (#35937200)
Imagine if the sun exploded tomorrow!
[ Parent | on HN ]
Re:Three Companies Impersonated Millions to Influence Intern... by 2OEH8eoCRo0 on Sunday May 14, 2023 @07:16AM (#35937136)
Stop trying to solve everything. These complex issues are never solved but we can improve and work on them.
[ Parent | on HN ]
Re:Three Companies Impersonated Millions to Influence Intern... by mauvehaus on Sunday May 14, 2023 @07:49AM (#35937282)
There's value to considering possible points of failure up front.

Think of the inertia that mag stripe only payment cards have in the USA, and think about how long it's taken to get chip cards rolled out. And then consider that we don't have the more secure chip and pin variant that Europe has, and (to the best of my knowledge) don't have any plans to go that route in the future.

A bad solution with broad penetration and huge network effects is one that can't easily be changed in the future. Let's do imagine some worst case scenarios and think about what it would involve to harden a system against them before rolling it out to everyone.

[ Parent | on HN ]
Re:Three Companies Impersonated Millions to Influence Intern... by hamilyon2 on Sunday May 14, 2023 @08:28AM (#35937470)
Sorry, but public-private key pair sais nothing about birth or death of individual. Which is an occurrence as common as you would guess. Being living person in some country is the relevant information, holding some cryptographic keys is not.
[ Parent | on HN ]