1) Do you seriously think that such a system won't get compromised sooner or later (probably sooner)? It will be an immediate target for criminals and probably a number of foreign governments
It's far more secure than relying on birth certificates and utility bills. Europe has quite a few digital ID systems already in place, without any issues. Meanwhile, the UK is one of the worst places when it comes to identity fraud.
2) Do you think that counterfeit digital IDs won't become a thing very rapidly?
It's not a thing in Poland, or in Estonia, or in many other countries. Why would the UK be special, given that anyone checking a digital ID will have access to their own app to verify the document being presented to them? A counterfeit digital ID will fail at the first check.
Counterfeiting is a problem unique to systems (like passports) where the thing of record is the physical item the user holds.
Indeed. A digital ID is far more secure than a passport, especially as the vast majority of people (myself included) aren't aware of how to check for most security features on a passport. On the other hand, I know how to verify a Polish digital ID.
Right. So no chance of the central database being compromised then? Either by technological means or by rogue staff? This is going to be a much bigger target for foreign governments than any commercial systems would be.
Compromising a database means being able to write to it. If you take Poland as an example, to make a change to the PESEL (like a national security number) database requires using a specific airgapped computer which is connected to a network that isn't connected to the internet. You can't compromise it, because there's simply no way in. You can use a human on the inside, but every human with access is also being monitored, and any 'more than reasonable' access is immediately flagged.
In the UK, you can compromise someone's identity by simply obtaining their birth certificate and photoshopping two utility bills. It's incredibly easily done.
I mean a centralised ID is a good thing - right? It means that people can't use the argument of "I can't afford an ID". It means verifying identities would be easier especially for AML. It may mean easier travel around the EU too. Yet everyone is using the argument of "what if", but the government already has the power to mandate everyone to carry passports, but they don't.
I think it's a very good thing, for the simple reason that it becomes straightforward to identity yourself. There won't be a mess of random documents that are about as secure as an unlocked car, there'll be a single document that everyone understands. If it's implemented in the right way, with the same app used for citizens and legal residents, it means that people will only need to be trained to accept one document.
Want to verify someone's identity? Use your e-ID app to check their digital ID. If you don't get a positive response, then you know that something is wrong. Simple. You can even keep a registered address for the person there, so there's absolutely no reason to mess about with bills or other ridiculously insecure forms of identifying yourself.
There is a solid case for bringing in physical ID cards for vulnerable people however, and I think this is a major failing of the idea to try and use only digital ID cards.
