News for hackers. Stuff that matters.
Re:The "email is authentication" pattern by hnbad on Saturday September 07, 2024 @07:52PM (#41477188)
Germany has PostIdent: you are issued a code, take it to the closest post office, hand them the code (originally this involved printouts) and your ID card and they scan your ID card and enter it into their system where the issuer of the code can then request that info to verify your identity.

This has largely been replaced by videochat for ID card verification where some underpaid person walks you through holding your ID card in front of your smartphone cameras to verify that it's real, not CG, not tampered with and matches your claimed identity.

The critical aspect here is that you don't have to hand your ID card (or a picture of it) to the company that wants to know your identity. The post office or the videochat provider serves as a trusted source of truth.

Re:The "email is authentication" pattern by elros on Saturday September 07, 2024 @08:31PM (#41477360)
Initially when I moved to Germany I thought it was a bit of a hassle to have to go to the post office for PostIdent; now I actually miss the elegance and privacy of that system in other countries.
Re:The "email is authentication" pattern by noAnswer on Saturday September 07, 2024 @08:47PM (#41477420)
Or you hold our ID card to your phone and do it on the spot.

https://www.deutschepost.de/en/p/postident/geschaeftskunden/...

Re:The "email is authentication" pattern by kolmogorov on Sunday September 08, 2024 @12:23AM (#41478192)