EU should have mandated a user-facing authentication scheme using a random string as the only authentication factor for everything. Pretty much like the API tokens for contemporary enterprise software, except that they would be used by ordinary people and not by application developers.

And complement it with hardware tokens for highly sensitive applications.

Passkeys could have been that, but they were quickly subverted by the industry.

▲

71bw 7 hours ago | parent | next [-]

But this does not allow tracking nor marketing, so why would they do that?

▲

sam_lowry_ 7 hours ago | parent [-]

Because of Digital Sovereignty concerns?

▲

71bw 7 hours ago | parent | next [-]

...how does that align with what the EU government is doing? The whole point is for you NOT to be sovereign!!!

▲

jesterson 7 hours ago | parent | prev [-]

You don't think anyone in EU bureaucracy has any concerns regarding Digital Sovereignty, do you?

▲

sam_lowry_ 6 hours ago | parent [-]

If this can win elections, then why not?

▲

jesterson 6 hours ago | parent [-]

I doubt this can win elections.

They will frame it as "child porn trafficking patriot saving act" and majority will vote in favour without reading fineprint.

	▲	sam_lowry_ 5 hours ago \| parent [-]
		Ever heard of Nerd vote?

▲

sneak 15 minutes ago | parent | prev [-]

Tell me you’ve never supported a large userbase without telling me you’ve never supported a large userbase.

What’s the plan for supporting the 50,000 people a day who lost their random string? What’s the plan for supporting the other 50,000 a day who pasted it into a random website? Europe has a billion people.