Fwd: Re: Fwd: Re: Question for app developers, like Enigmail etc. - Identicons

[Stefan Claas]

Am 07.06.2017 um 10:57 schrieb Peter Lebbing:

> On 07/06/17 07:55, Stefan Claas wrote:
>> The procedure went like this: I inserted my id-card in a certified
>> card reader, which i purchased, startet the german certified id-card
>> software "AusweisApp2" to connect to the CA Server and the server
>> checked my id-card online and after verification send the signed
>> pub-key to my email address.
> What prevents someone else from doing this with your ID-card? For
> instance, someone with whom you live?
>
>
The ID-card is protected with a pin which i have memorized.
But good that you bring this point up! Should my ID-card get's
stolen the thief can only try thee times to guess the pin.

Regards
Stefan