at a talk by @epicenter_works (🫶🏻) talk about #eIDAS at #FreedomNotFear #fnf26

it will be a centralized system used for so many things. citizenship, identity, age verification, digital euro spending, healthcare data, drivers license, public transport, social media SSO, etc

OMFG F THIS (trauma informed triggers)

Pros:
- a right not to use it
- user-driven consent and selective disclosure mechanism
- over asking
- data accessible to researchers for transparency
- no unique persistent identifiers (as much as some people wanted)
- unlinkability (the first release DOES NOT USE zero knowledge proofs)

Bad:
- right to pseudonymity, but zero policy around what this means, and users cannot lie. so in effect myst be real name. the commission intentionally left this out
- deniability. every data has an attribute provider, the crypto proof used cannot be denied
- biometric identification. zero limits around use, collection, etc. Feb 2026 biometrics (headshot) was added back in, member state defined safeguards may support opt-in or opt-out for this; 24-month wait period before can be forced
- Unobservability.
- ZKPs, two technical implementations are fighting it out for use. 1-2 years before use. Google is one of them.
- open source. back-end exceptions
- device security. burden of proof shifts to the user because the service can claim cryptographic integrity regardless of device status