Dutch experts warn US takeover of DigiD platform poses security risks

nltimes.nl

82 points

CalRobert

20 hours ago


24 comments

guax 18 hours ago

There is a banner warning at the DigiD website (in dutch) about this: https://www.digid.nl/solvinity

One of the FAQ questions is: Will an American company soon be able to view my data?

This tells a lot about US street cred atm. This was added to the website not because of niche political activism but by a sizeable concern of the population.

  • deaux 12 hours ago

    Says everything that the answer they put there doesn't begin with "No." but instead weasels around it.

peterspath 19 hours ago

Time to ditch DigiD? Unfortunately we are locked in as citizens.

Maybe they should open up 'eHerkenning' to citizens as well instead of only companies. And a bit more competition should be good, like use your bank to sign-in into government services.

  • wolvoleo 11 hours ago

    The alternatives iDIN and eHerkenning are commercial right? I know iDIN is from the banks and I definitely don't trust them. Unfortunately you can't do without them in today's society but I won't use them for this.

    DigiD should just remain a government operation.

  • user32489318 19 hours ago

    eHerkenning cost 100eur/user/year for the most basic functionality. That’s a significant amount to pay for by the government

    • peterspath 19 hours ago

      That is why the suggestion for competition is there.

      DigiD is a bit less indeed, estimation: €239M GDI-budget / ~17M users ≈ ~€14 per user per year.

      • PearlRiver 10 hours ago

        It is not about the money there is so much legislation about government procurement. Unfortunately we cannot declare the US as a hostile nation.

    • jbverschoor 19 hours ago

      It’s 15-25 and you get a free grant of 25 per year

yolo3000 19 hours ago

I wonder why people look at this like a deer in the headlights. Replace Solvinity/Kyndryl with another 'provider'. Hire some competent people to migrate and operate it.

throw310822 20 hours ago

It's completely unacceptable and unconscionable for European countries to transfer any part of their critical infrastructure to the US after the US have already weaponised existing dependencies- for example putting the ICC under sanctions and blocking their access to Microsoft services. The cowardice of EU countries is really disgusting.

  • derkades 8 hours ago

    The US company only does software development, hosting is still done by Logius in NL.

  • benj111 18 hours ago

    >blocking their access to Microsoft services.

    Really? So basically any organisation in any country that the current or future US administration may be hostile to (read everyone) should now be looking for an alternative. Seems short sighted on the USs end. Again.

ramon156 6 hours ago

They can already request DigiD info given a good reason.

rowanG077 19 hours ago

The Dutch sold nexperia to the Chinese, recently decided that going to MS software for their tax division is the best option and now this. Higher ups seem to really be sleeping at the wheel.

  • timeon 18 hours ago

    Netherlands as well as Denmark went more into MS than some other countries. Turns out it was bad choice.

Kim_Bruning 18 hours ago

The infrstructure is currently run by the Brits?

If not DigiD, then what else would even qualify for 'SECRET NOFORN' ?

  • wolvoleo 11 hours ago

    The Ministry of Defense has their own authentication stuff. DigiD is for citizens to communicate with the government.

  • Kim_Bruning 13 hours ago

    Ah Solvinity is a supplier, but DigiD itself is run on dutch govt servers. Ok, that's a bit better at least.

saidnooneever 7 hours ago

i wonder when we will get US passports over here -_-

mohsen1 19 hours ago

This makes no sense

nijmegenn 19 hours ago

This is disgusting. Seriously, how is this even allowed?

  • dc396 17 hours ago

    “Our government does not want to offend the Americans because it is afraid of reprisals,” -- from the article

    • deaux 12 hours ago

      We've got a specific laws against the crimes by people involved here, including the named minister - it's called "treason".