Some schemes could require the person to remember a passphrase (not printed out) that is mixed in with the one-time-token to compute the final verifier token.
> you can be "encouraged" to send an email to [email protected] with your national ID number and your token
Would the system providing some sort of plausible deniability token give enough cover for this? Is this a problem at scale?
Also... they can do this to you for your email, and social media logins too right?
> Or the day after the election, in each office at work everyone can just meet and show their token while cheering for the current government.
I don't understand why this is fundamentally different than todays world where people wear MAGA hats or drive around with Obama/Biden bumper stickers. Sure it's not cryptographically verifiable. But it's certainly "good enough" for all practical purposes.
> you can be "encouraged" to send an email to [email protected] with your national ID number and your token
Would the system providing some sort of plausible deniability token give enough cover for this? Is this a problem at scale?
Also... they can do this to you for your email, and social media logins too right?
> Or the day after the election, in each office at work everyone can just meet and show their token while cheering for the current government.
I don't understand why this is fundamentally different than todays world where people wear MAGA hats or drive around with Obama/Biden bumper stickers. Sure it's not cryptographically verifiable. But it's certainly "good enough" for all practical purposes.