undefined | Better HN

0 pointsnemetroid5y ago0 comments

> full personnummer, which is similar to a social security number in the US

It's similar in the sense that it's a unique number assigned to each person, but the fact that it's publicly available means that it cannot be used as authentication.

0 comments

1 comments · 1 top-level

ptman5y ago

And SSN shouldn't be used as authentication either. It's too easy to steal, too hard to change.

We have a similar issue with Finnish Personal Identity Codes, which are legally public, but there are restrictions related to their processing. Which leads to the common misunderstanding that they're secret, so they're used for authentication. It's a mess.

https://hetueiolesalasana.fi/en.html

j / k navigate · click thread line to collapse