As a Dual British/Swedish Citizen, I really do not trust the UK government. They have proven over and over and over, that at every opportunity presented they will increase their own authority. I don’t believe I have personally witnessed any other advanced economy that so ardently marches towards authoritarianism.
So, no matter if it’s a good idea or not. I can’t in good faith advise the UK having more powers. Unfortunately the UK government themselves can sort of just grant themselves more power. So…
[0]: https://e-estonia.com/card-security-risk/
[1]: https://therecord.media/estonia-says-a-hacker-downloaded-286...
I don't get the resistance to a digital/national id in other countries. To us it is quite bizarre.
Some have explained it with a lack of trust between citizens and the country.
But without such digital id it is impossible to have such digital government services as we have here. The government services need to verify and autheticate the citizen, so they only access their own data and not someone who has the same name and birth date by accident.
I don't see how such a system gives the government more powers. It already has all the data on its citizens, but it is spread out, fragmented, stored with multiple conflicting versions, maybe some of it is stored in databases where no one cares about security, etc.
And now we know what Estonia's single point of failure is.
An adversary only has to hack one system to bring an entire country down. That sounds a bit scary to me.
Attacking the DMV doesn't make licenses vanish into thin air either for example.
Nevada's DMV was part of a hack a couple of months ago, and it caused chaos beyond just drivers licenses.
https://www.2news.com/news/local/nevada-restores-fingerprint...
This is an excellent real-world example of why having all your data eggs in one basket is a terrible idea.
If you attack the DMV in a country that has working eID it will only affect the DMV. Maybe you can't sign up for a driving exam or order new plates. That's it. It won't affect the police in cases that don't concern the DMV (like insurance) and vice versa. Sure if you attack everything at once everything will be affected, that's always an option, eID or not.
Fundamentally a digital ID does not mean a single "basket", just that wherever those "eggs" are that you know it's one single "chicken". That "chicken" can also have multiple ways of identifying themselves (including offline methods). That's how it is in countries that have a working eID implemented.