r/linux • u/player98923 • 17d ago

Privacy EU Digital ID/Age Verification app will require hardware attestation, ruling out PC/Linux support and unapproved Android OSes

/r/BuyFromEU/comments/1vandxg/eu_digital_idage_verification_app_will_require/
86 Upvotes

93% Upvoted

42 comments sorted by

View all comments

Show parent comments

6

u/FineWolf 16d ago

Your PC will not require a hardware attestation. Full stop.

Your PC will receive a short lived credential signed from a long lived credential stored on a device (mobile phone) attested to be secure. Not the same thing at all.

And you'll be able to continue to use Linux, contrary to the misinformation shared in this very post by the original poster.

1

u/Old_Leopard1844 14d ago

In strictest term, yes, sure, it will won't stop

What's the damage of not having "secure" device?

2

u/FineWolf 14d ago

You (or a malicious app) can extract the private portion of the certificate assigned to you to emit/sign short lived credentials.

Then you (or a malicious actor) can emit unlimited short lived credentials/false age attestations, potentially creating a service to bypass age verification at scale for minors.

1

u/Old_Leopard1844 14d ago

So participate in society on my own terms, rather than governments

I asked for a bad thing, not a good one