PII with an expectation of privacy should be locked down within companies. Like private keys or passwords.
Any leak should come with a per instance leak penalty of $10,000 automatic disclosure / pay out to the individual affected. Companies have 3 years to migrate.
Put a clear penalty in place, companies would update their systems.
1
2
9
zk.me works well. Totally eliminates the data at rest attack surface. The client side production of snarks means the onus of responsiblity lies on the user to not have their devices compromised tho...
Also the SBT is static. So reproofing must occur for KYC compliance checks.
I'm using their service in my app for sybil resistance and to detect and expel fraudsters. Very grateful they exist.
1
some really interesting projects working on this. I find it odd how little alignment there is between different wgs as I imagine a unified spec benefits all 🤷♂️ anywhoo, gordion envelope has some firepower imo👌 🔐
