NoLimitSecu #535 - Identité Numérique Régalienne

Item: NoLimitSecu #535 - Identité Numérique Régalienne
Rating: 4
Author: PostSingularity Institute

by NoLimitSecu

Applied Sciences & Engineering Computing & Cybersecurity URComputer security URDPrivacy and data protection

🎙 NoLimitSecu 👥 2K 📅 March 16, 2026 ⏱ 36 min 👁 181 📄 expert opinion 🧭 2026-08-16

Available in: English (current) Français

Keywords

digital identityeIDASFrance IdentitéEUDI Walletselective disclosure

Summary

In this episode of NoLimitSecu, hosts Johann and Hervé are joined by Benoît Léger-Derville and Nicolas Chalanset, co-founders of Stelau, a cybersecurity consultancy. The discussion centers on the concept of ‘régalienne’ (sovereign) digital identity, focusing on the French France Identité app and the broader European EUDI Wallet initiative. The guests explain the regulatory background, particularly the eIDAS 2 regulation, which mandates that EU member states provide digital identity wallets to all citizens by the end of 2026. They detail the technical protocols involved, such as OpenID for Verifiable Presentations and Verifiable Credential Issuance, and standards like ISO 23220-5 and -7. The episode highlights the promise of selective disclosure, allowing users to prove attributes (e.g., age) without revealing unnecessary personal data. They also discuss the current limitations, such as the reluctance of some organizations to accept digital identity proofs, and the upcoming obligation for relying parties to accept them. The conversation covers use cases like voting proxies, postal pickups, and SNCF controls, as well as the concept of a business wallet for corporate identities. The guests share their experience in auditing PVID (remote identity verification providers) and emphasize the importance of these systems in reducing data leakage and improving privacy.

199 words

Critical Evaluation

Value of the Information & Strength of the Argument

The value of the information is high for those interested in the practical implementation and regulatory aspects of digital identity in Europe. The guests provide a clear explanation of the eIDAS 2 regulation and its implications, and they demystify the technical protocols by relating them to familiar use cases. The argumentation is solid, as they base their claims on their professional experience and on the regulatory texts, though they do not cite specific studies or data. They also acknowledge the limitations and challenges, such as the slow adoption by relying parties and the risk of data leaks, which adds credibility to their discussion.

Scientific Rigor, Source Quality, Title Accuracy

The scientific rigor is moderate: the guests are experts and provide accurate technical details, but the discussion is not structured as a formal presentation with citations. They reference the eIDAS regulation and ISO standards, but do not provide direct links or specific documents. The sources cited in the description are relevant and provide additional technical documentation. The title accurately reflects the content, which is a focused discussion on sovereign digital identity. No comments were provided, so no analysis of public reception is possible.

201 words

Title / Content Match

The title accurately reflects the content, which focuses on the French and European sovereign digital identity systems.

Quality & Reliability

7/10

The discussion is led by two cybersecurity experts with extensive experience in identity and access management. They provide detailed technical explanations of protocols and regulations, but the episode is primarily an expert conversation rather than a peer-reviewed scientific presentation. The information is consistent with known EU regulations and technical standards, but lacks formal citations to primary sources.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Playground France Identité - Documentation — Mentioned as a test environment for interoperability with EUDI Wallet.
Playground France Identité - Playground — Mentioned as a technical platform for testing credential exchanges.
Stelau Playground — Mentioned as a verifier developed by Stelau for testing credentials.
Stelau Website — Mentioned as the company website of the guests.

Concurring Sources

eIDAS Regulation — The regulation that mandates electronic identification schemes and trust services.
OpenID Foundation — Organization behind the protocols mentioned in the episode.

Contribution & Novelties

The episode provides a clear and accessible overview of the European digital identity framework, focusing on the French implementation. It explains the technical protocols and standards in a way that is understandable to a non-specialist audience, while also offering insights from practitioners who have been involved in the ecosystem. The discussion of the business wallet and the challenges of adoption adds practical perspective.

Pour aller plus loin :

eIDAS Regulation (EU) No 910/2014 — The foundational regulation for electronic identification and trust services.
eIDAS 2.0 Proposal — The European Commission’s page on the revised eIDAS regulation.
OpenID for Verifiable Presentations — The specification for presenting verifiable credentials.
ISO/IEC 23220-5 — Standard for identity documents and their use in mobile devices.

120 words

Radar Profile

The radar profile shows balanced scores across all dimensions, with slightly higher scores in quantity and quality of information, reflecting the detailed yet accessible nature of the discussion. The technical level is moderate, suitable for a general audience with some background in cybersecurity.

Reliability 7/10