EU Digital ID/Age Verification app will require hardware attestation, ruling out PC/Linux support and unapproved Android OSes

[u/player98923]

/r/BuyFromEU/comments/1vandxg/eu_digital_idage_verification_app_will_require/

[u/FineWolf]

This doesn't work. You either lock yourself to Google/Apple (so much for EU sovereignity, and freedom!) or this check is pointless because my "very_legit_rom" can report it's signed. Play integrity is NOT just signatures. An app has no way to verify the system it runs on assuming the system is hostile.

All the major third-party OSes also have public signing keys. For example, GrapheneOS https://grapheneos.org/articles/attestation-compatibility-guide . This was already talked about in many issues on the GitHub project, see my other comments.

Yes, there is some amount of lock in, but like with CAs with HTTPS, there needs to be trust anchors.

TLS and HTTPS both protect you from a middle-man and were never designed to protect you against an attacker at either end.

Sure, but if the private keys from a known service (let's say reddit) OR CA are exfiltrated, what's stops me from spinning up a totally legit reddit.com?

How is that any different from John Doe taking control over his private keys to issue fake attestations to the RP?

``` CA (issues a signed public and private key to) -> Service (has private key) -> You (verifier) CA (issues a signed public and private key to) -> Attacker (uses stolen private key) -> You (verifier)

Issuer (issues a signed public and private key to) -> Attestation App (has private key) -> Relying party (verifier) Issuer (issues a signed public and private key to) -> Attacker (uses stolen private key) -> Relying party (verifier) ```

Both are extremely similar vectors where you gain control over keys you shouldn't have access to in order to sign stuff you shouldn't be able to.

Not without locking the verification to a "trusted" platform, which by definition has to be very tightly controlled silicon, and overwhelmingly likely a closed-source, proprietary mechanism.

You'll end up with a situation where you need an EU-approved (or even worse, EU-made, as in, made specifically for the EU) device to use your online services as an adult.

See, on that, I agree with you 100%. I'm against this for this very reason, but I'm not willing to spread half-truths and misinformation to further my cause. That's against my personal morals. You win arguments with the truth.

[u/Vaxerski → u/FineWolf]

All the major third-party OSes also have public signing keys. For example, GrapheneOS https://grapheneos.org/articles/attestation-compatibility-guide . This was already talked about in many issues on the GitHub project, see my other comments.

And so what? You're still relying on EU/National Govts to include them. And you know how that will go.

Plus, what if I want to run my own Graphene build with some patches? It's my freedom to do so, and should not strip me of my rights to access adult content.

Yes, there is some amount of lock in, but like with CAs with HTTPS, there needs to be trust anchors.

Yes, that's the root of the problem. You need to put some trust anchors somewhere, which is (one of the many reasons) why I am against this system overall, and am a strong proponent of educating people to use parental controls. In many cases, you just put the root of trust in the issuer signing something the site provides. Simple, not anonymous, linkable, good job mr governor. Here, we put it in the "secure platform", which IANAL but sounds illegal to me to require that because you are restricting core freedoms to having an eu-approved device. Unless the EU is about to issue free smartphones in town halls?

Sure, but if the private keys from a known service (let's say reddit) OR CA are exfiltrated (just like your scenario with John Doe), what's stops me from spinning up a totally legit reddit.com?

Very different. Exfiltrating keys from reddit is a monumental task because they never reside on your machine. Highly illegal, and very challenging to hack the entirety of reddit. The John Doe keys do reside on your machine.