Dutch experts warn US takeover of DigiD platform poses security risks(nltimes.nl)
88 pointsby CalRobert23 days ago11 comments
  • guax23 days ago
    There is a banner warning at the DigiD website (in dutch) about this: https://www.digid.nl/solvinity

    One of the FAQ questions is: Will an American company soon be able to view my data?

    This tells a lot about US street cred atm. This was added to the website not because of niche political activism but by a sizeable concern of the population.

    • deaux23 days ago
      Says everything that the answer they put there doesn't begin with "No." but instead weasels around it.
  • peterspath23 days ago
    Time to ditch DigiD? Unfortunately we are locked in as citizens.

    Maybe they should open up 'eHerkenning' to citizens as well instead of only companies. And a bit more competition should be good, like use your bank to sign-in into government services.

    • mindcrash22 days ago
      No, they should move DigiD out of that data center.

      Pretty much all critical Dutch gov services are located in sovereign data centres across the Netherlands. Why they can't do it with DigiD baffles me. Especially because it is (or at least used to be) based on a plain Java and Oracle stack.

    • wolvoleo23 days ago
      The alternatives iDIN and eHerkenning are commercial right? I know iDIN is from the banks and I definitely don't trust them. Unfortunately you can't do without them in today's society but I won't use them for this.

      DigiD should just remain a government operation.

    • user3248931823 days ago
      eHerkenning cost 100eur/user/year for the most basic functionality. That’s a significant amount to pay for by the government
      • peterspath23 days ago
        That is why the suggestion for competition is there.

        DigiD is a bit less indeed, estimation: €239M GDI-budget / ~17M users ≈ ~€14 per user per year.

        • PearlRiver22 days ago
          It is not about the money there is so much legislation about government procurement. Unfortunately we cannot declare the US as a hostile nation.
      • jbverschoor23 days ago
        It’s 15-25 and you get a free grant of 25 per year
  • rowanG07723 days ago
    The Dutch sold nexperia to the Chinese, recently decided that going to MS software for their tax division is the best option and now this. Higher ups seem to really be sleeping at the wheel.
    • timeon23 days ago
      Netherlands as well as Denmark went more into MS than some other countries. Turns out it was bad choice.
  • yolo300023 days ago
    I wonder why people look at this like a deer in the headlights. Replace Solvinity/Kyndryl with another 'provider'. Hire some competent people to migrate and operate it.
  • throw31082223 days ago
    It's completely unacceptable and unconscionable for European countries to transfer any part of their critical infrastructure to the US after the US have already weaponised existing dependencies- for example putting the ICC under sanctions and blocking their access to Microsoft services. The cowardice of EU countries is really disgusting.
    • derkades22 days ago
      The US company only does software development, hosting is still done by Logius in NL.
      • maxldn22 days ago
        That doesn’t make a difference though because of the cloud act
    • benj11123 days ago
      >blocking their access to Microsoft services.

      Really? So basically any organisation in any country that the current or future US administration may be hostile to (read everyone) should now be looking for an alternative. Seems short sighted on the USs end. Again.

  • 23 days ago
    undefined
  • Kim_Bruning23 days ago
    The infrstructure is currently run by the Brits?

    If not DigiD, then what else would even qualify for 'SECRET NOFORN' ?

    • wolvoleo23 days ago
      The Ministry of Defense has their own authentication stuff. DigiD is for citizens to communicate with the government.
    • Kim_Bruning23 days ago
      Ah Solvinity is a supplier, but DigiD itself is run on dutch govt servers. Ok, that's a bit better at least.
  • ramon15622 days ago
    They can already request DigiD info given a good reason.
  • saidnooneever22 days ago
    i wonder when we will get US passports over here -_-
  • nijmegenn23 days ago
    This is disgusting. Seriously, how is this even allowed?
    • dc39623 days ago
      “Our government does not want to offend the Americans because it is afraid of reprisals,” -- from the article
      • deaux23 days ago
        We've got a specific laws against the crimes by people involved here, including the named minister - it's called "treason".
  • mohsen123 days ago
    This makes no sense