Who is being you right now?
In many countries, the use of an eID is part of people's daily life. It provides the key to banking, government services, health records and much more.
How does the service provider know who is using the eID?
Short answer: They don't.
While the identification process is strong when signing up for an eID, it is absent in daily use. Others could be using your eID, because you gave them access, or they gained access without your knowledge.
This is already a big problem, and with the arrival of the EUDIW the stakes get higher. It enables selective disclosure, such as proving your nationality, professional credentials, age and much more, without revealing anything else. But if you cannot trust that the user is the owner, how can you trust "I am over 18"?
