[eleg-projekt] Goda nyheter från Nederländerna: eftersträvar e-legitimation med 100% öppen källkod

[Elias Rudberg <mail@xxxxxxxxxxxxxxx>]

Hej!

Den här artikeln på holländska 
https://www.security.nl/posting/755793/Van+Huffelen+wil+dat+DigiD+in+toekomst+volledig+open+source+wordt 
från 3 juni 2022 blir ungefär följande översatt till engelska:

----------

Van Huffelen wants DigiD to be fully open source in future

State Secretary for Digitalisation Van Huffelen wants DigiD to be fully 
open source in the future. Something that is not yet the case. Van 
Huffelen made this known during a debate on the Digital Government Act. 
In principle, future identification and log-in tools should also be open 
source.

The Digital Government Act regulates that Dutch citizens and companies 
can log in safely and reliably to the (semi-)government. Citizens will 
receive electronic means of identification (eID) with a higher degree of 
reliability than the current DigiD. In addition, these means of login 
must be fundamentally open-source. Something that does not yet apply to 
DigiD.

“It does not work entirely with open source software. That’s because it 
cannot yet be used securely for all processes. But this must also apply 
to DigiD, of course, just as it applies to other log-in tools. We want 
to shape the growth path for this in the coming period”, said the State 
Secretary.

Van Huffelen herself calls it “growing towards it”, because not all 
log-in systems are open source at the moment. “DigiD, for example, is 
not yet fully open source. It is a login tool that we use and that we 
consider secure, but it is not fully open source. So we want to make 
sure that the login tools that private or public parties use and that we 
want to allow into our system in the future are ideally based on 100 per 
cent open source.”

During the debate, there was also discussion about requiring only open 
source login tools in the law. “If you demand in the law that it must 
always be, that it must be one hundred percent, and it’s not possible 
now, then you’re already failing to meet the requirement today. Then you 
would have to stop the DigiD,” Van Huffelen responded. “We are going as 
far as possible with the open source principle and the obligation, apart 
from cases where security or continuity is at stake.” The Lower House 
will vote on the bill and the motions submitted during the debate on 7 June.

----------

Det verkar alltså som om politiker i Nederländerna har förståelse för 
betydelsen av öppen källkod för säkerhet och att de är på väg att skapa 
e-legitimation med 100% öppen källkod.

Jag tycker det verkar väldigt lovande, om Nederländerna går före kan det 
bli betydligt lättare att få svenska politiker att förstå det här.

Om någon vet mer om läget i Nederländerna, berätta gärna!

/ Elias

Listan för diskussion om fri och öppen e-legitimation är öppen för alla.
Listan arkiveras och publiceras öppet på internet.
Arkiv: https://lists.dfri.se/eleg-projekt/