Personal Information
Contents
Meme
If it is Personal Information, why do you want it?
Context
Mankind has hated snoops and gossips since histories have been written. Why should things change now?
- Gossip
- Snoop
- Online Web Sites have risen into the space with Web2.
- Local Convenience stores now want to be able to download all the information on my Mobile Driver's License.
Problems
People are not pleased with the hashtag#privacy associated with digital payments. Here is a Dark Pattern of Verifier requests that was actually seen in the California mDL trials run lately. (note: the result was that too much information was released.) - To be clear, I want to see payments working, but i believe in the principle of KISS = keep it simple stupid, and i don't see that in current payment proposals. Please help to get these fixed before it is too late.
The Verifier will get hashtag#permission (or whatever it might be called) to ask for a collection of purposes, for example a convenience store could be selling chewing gum, hard liquor and sim cards for smartphones. This is what the hashtag#OID4VP hashtag#ecosystem allows it to ask for, along with payments. So if I buy a stick of chewing gum and decide to pay with my EUDIW, it is within the approved permissions for this store to ask intrusive questions that apply to purchasing liquor or sim cards, which are very intrusive in some countries.
Eve Maler
This has been a known challenge since at least InfoCard days. When you're asked for permission at the point of service, it's nearly impossible to have full choice in the matter. That's true even if you nominally have the ability to pick and choose what you share and for what purposes. The cherry on top is that even if you share selectively, you're nearly always re-identifiable from other exhaust data that nigh impossible not to shed. (I still believe in getting to choose what you share! It just doesn't mean what most people think it means: an increased chance of anonymity.)