[pascalmahe]

I don't know much about infosec but I know enough to see that this tool is not ready. It's really scary. Also the fact that it's not discussed much, here in France. It's the first time I've heard of it. From a country that has had a government agency for protecting digital liberties since 1978 (which made laws about what data you can and cannot keep as a software provider) it's a big change of direction.

[seszett]

What is scary about it, though? It's really just adding a new way of authenticating on government websites. I like the idea of how it works, but I don't find it very secure, compared to Belgium's chip and pin system for example (this application is the equivalent to Belgium's itsme, which I use often enough).

However it's probably the best we can do in France since we don't want to have a centralised citizens database.

[epse]

itsme has me really scared about it's security, especially since they are so handwavy about it. I browsed their site for a long time before enrolling, but didn't find anything useful.