@valaramech@fedia.io avatar

valaramech

@valaramech@fedia.io

This profile is from a federated server and may be incomplete. For a complete list of posts, browse on the original instance.

valaramech ,
@valaramech@fedia.io avatar

That's kinda backwards, isn't it? If I want to verify my identity to a company, they would send me something that only I could decrypt. Some government agency provides all the public keys of all citizens, the company takes my public key, encrypts some secret with it, sends it to me, and asks me to decrypt and return it. If I'm able to do so, I must be who I say I am otherwise I would not be able to decrypt the secret.

In an ideal world, the company (or, even better, the employee) would have a similar certificate that I could use to encrypt my response with.

valaramech ,
@valaramech@fedia.io avatar

This is no longer the case. Any SSN issued after 2011 is fully randomized

Additionally, the following SSNs are always invalid:

  1. Any SSN with "000", "666", or "900"-"999" in the former area number
  2. Any SSN with "00" as the former group number
  3. Any SSN with "0000" in the former serial number.
valaramech ,
@valaramech@fedia.io avatar

In this theoretical system, ideally it's illegal for anyone other than the person who's supposed to have the private key to have it - excepting some subset of legal reasons (e.g. parents for their children). So, the only business that would be asking for people's private keys are the kind that are already operating outside of the law.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • test
  • worldmews
  • mews
  • All magazines