6 ms·
as promised, wanted to circle back on a few last items: > Is the document in the encrypted blob accessible by the user? Currently, verified elements of the do
by mikeysight 25d ago
as promised, wanted to circle back on a few last items:
> Is the document in the encrypted blob accessible by the user?
Currently, verified elements of the document are encrypted and persisted but not the entire document. I do think in the future the encryption and persistence of the full document could be justified for reusable ID presentation during KYC. In these cases, selfie or liveness check would likely need to be re-completed and validated against the existing document, but would still save the user a document upload.
> Can my identity be shared with websites?
No. As I mentioned above however, in the future I do believe it could make sense for a user to optionally share their identity document with an application requiring KYC (like a bank or other regulated entity) to improve that user experience across multiple applications.
> Basically: what stops someone from sharing their One passkey? What stops me from letting my AI agents use it, share it with my younger cousin or sell it online?
The passkey itself is device/ecosystem - bound, so it's not something that can be sold or transferred, but more importantly, the passkey is not ultimately the proof of personhood in this case. That comes from the identity document, which needs to recently match the presenter at time of verification.
I hope that helped clarify, let me know if there's anything else I can answer!