Aadhaar: when authentication becomes rations
A biometric match can be highly accurate at national scale and still be the wrong place to put the cost of a failed fingerprint.
What's up
10 reports — what is happeningThe weekly briefing →
When does an age check become an identity check?
The EU's age-verification blueprint promises a simple yes-or-no proof. Its success depends on preventing that proof from becoming a reusable tracking handle.
Certificate Transparency does not prevent mistakes
It makes certificate authorities observable. That narrower promise has done more for trust than pretending misissuance can be designed away.
Estonia and the chip that broke trust
The model digital state survived a mass identity-card vulnerability because it had revocation, remote repair, alternatives and an institution willing to act.
The EU wallet arrives before its privacy does
Europe's identity wallet is real, useful, optional—and racing toward a privacy problem that selective disclosure does not solve.
The safety number nobody checks
Signal gives every pair of correspondents a strong way to verify keys. Most people ignore it, and the design remains useful.
The state can protect your privacy and still see everything
China's national internet identity service reduces the need to hand civil-ID data to platforms by concentrating authentication in a public system.
Who sent this agent?
An AI agent can have a name, a key and a polished voice while remaining unable to show who authorised the action it is taking now.
Why digital identity projects keep dying
Passport, CardSpace, Persona and Web5 did not all fail for the same reason. Together they show that good identity architecture can still lose to habit.
Worldcoin and the price of one human
Proof of personhood answers a real AI-era problem. The Orb makes the bargain unusually visible: uniqueness in exchange for an irreversible measurement.