Drew's Blog. The dots in .co.uk

Drew Wagar's Weblog.

« The Swizz of the... | Main | A little bit more on... »

Thursday October 13, 2005

Interlude on Digital Signatures

Geraint's comment on my previous post was rather revealing (thanks for that Geraint). I wasn't aware that the government had specifically ruled out digital certificates for inclusion on the ID card. Hands up, red face. Doh! :-(

This is apparently to reduce the projected cost of the cards... How much does a digital cert cost? About £25 today. If we're going to have to have ID cards, I'd rather pay the extra thanks.

Apparently, other than biometrics, the only other two factor identification component being suggested is the good old PIN number, making the ID Card about as secure as a credit card for online transactions. Not much of a step forward. I am assuming that the Government doesn't intend to issue all 60 million of us with a personal biometric scanner ;-)

Ok, the government has said that the card wasn't designed for e-commerce (real opportunity missed for reduction in fraud, spamming, phishing etc), but it leaves another big problem. With no digital credential aboard, duplicating a card is going to be, if not easy, not nearly so difficult. It's not easy to guarantee uniqueness without a PKI.

Having thought about it for a while, I can't see a way around it. If you're going to create a system like this you might as well do it properly. I think the government will do a u-turn on this once the detail comes out after the public consultation is over. (What Sir Humphrey called the 'Janet and John Bit' ;-) Kind of interesting that the government has been looking at ways to make PKI affordable, yet hasn't tied this up with the ID Card. Atleast not yet.

Aren't government departments supposed to talk to each other? ;-)

( Oct 19 2005, 05:05:17 PM BST / Oct 13 2005, 05:05:20 PM BST ) Permalink Comments [2]
Trackback: http://blogs.sun.com/Drew/entry/interlude_on_digital_signatures

Trackback URL: http://blogs.sun.com/Drew/entry/interlude_on_digital_signatures

Comments:

I think the government will do a u-turn on this once the detail comes out after the public consultation is over. The public consultation is over. What's in the bill is what the governemnt plans to do.

Posted by john eckersley on October 14, 2005 at 03:42 PM BST #

The official public consultation... yes. It aint over 'til the fat lady sings! ;-)

Posted by Drew on October 14, 2005 at 04:25 PM BST #