alt Hacker NewsGood on the Dutch government for actually doing something.
Replies
All governments are "doing something". It just isn't at all effective and mostly because they're unwilling to invest even marginal amounts.
Like in this case. The technology here utterly depends on Google Play Services on Android or App Attest on Apple (or "secure enclave"), and that is in fact essentially the only functionality.
This could have been solved instead switching to a standard (switching to OATH, RFC 4226 and RFC 6238), thus killing the dependency on Google/Apple while still allowing those devices to work smoothly, but also allowing a Linux implementation, allowing anyone . Plenty of European companies provide implementations for this, some with and some without the dependency on Google/Apple attestation.
At the same time they're allowing the tax office to migrate completely from a self hosted solution to office 365 do there's that.
They had to be dragged kicking and screaming into doing this. Several attempts were made to force them to block the takeover. Not sure what caused their latest turnaround.