@Sjors if the law itself mandates recoverability, is any privacy preserving version even possible, or does mandated recovery always mean a backdoor?
Login to reply
Replies (1)
I haven't studied that part of the Directive yet. Recovery could just mean: if you lose your pin, you sign up again, download your digital drivers license and other stuff again. Not much different from losing a physical wallet. It's a UX trade-off, but with serious privacy consequences.
The harder (but maybe not impossible) part is blacklisting (by the authorities) and revocation (by the user, after they lose access).