Since 15.12.2021 suddenly many Belgium eID card identification applications broke down. If you have debugging turned on in your Apache vhost then you will see something like that in the error.log Affected integrations where based on Client Certification Authentication also called mTLS. This means that web server requests browser to Read more…
European Digital Identity wallet is in the process of finalizing technical specifications. Among the main goals the wallet must be able to: Create qualified electronic signatures Contain and allow sharing “electronic attestiations of attributes” about the person At the same time we have all the building blocks already available and Read more…
Arnis Parsovs is greatest single researcher who has found and helped to fix many security vulnerabilities around Estonian eID card scheme. I can only assume that other countries have all kinds of issues still present. Latest published discovery shows how it is possible to login into freely chosen website that Read more…
People are often confusing eID related topics that are not one and the same. Not knowing all the facts makes them scared of their privacy. Lets clarify some questions that I have seen people to be misunderstanding. Using national eID cards or others solutions do not have significant differences from Read more…
Why eID client certificate authentication? This the main scenario where national ID card users that have smart card chip can be identified in the website. Certificates stored on ID cards can be used to identify people online. In simplest terms the webserver tells browser what kind of certificates it accepts Read more…
Traditionally e-ID identification means using national ID card cryptography to verify the user is who he claims to be. Browsers have “Client certificate authentication” where webserver is configured to accept certificate provided by the client to verify its identity. For this browser sends server its public certificate and also token Read more…
