![](/static/66c60d9f/assets/icons/icon-96x96.png)
![](https://lemmy.ml/pictrs/image/h1ChnLuBHr.png)
It’s impossible to do without exposing a private signing cert to everyone, yes. That’s the issue.
You can’t do asymmetric key signing anonymously and with a central issuer.
So either you have to just trust the assertions (0 security) or you have to have a trusted issuer (not anonymous)
A pseudonym issuer is a trusted issuer. There’s no way to do it otherwise. You have to trust someone to make this kind of system work.
If you’re not paying for T-Mobile magenta you’re not getting full T-Mobile priority speeds.