Estonia’s RIA says DigiDoc security is an ongoing process

Estonia’s Information System Authority (RIA) has published a reply to a remark by Digigeenius reporter Ott Ajaots, who criticised the agency’s attitude toward security vulnerabilities in DigiDoc.

Anna Õuekallas, head of RIA’s electronic identity department, writes in an opinion piece that no complex software is ever finally finished or completely free of faults.

She says a great deal is expected of Estonia’s digital state, and rightly so. People are used to dealing securely with the state without leaving home, to documents moving digitally, and to signing without searching for a pen or arranging a meeting.

Whatever way people interact with the state, she writes, official business must remain understandable, secure and transparent, because only then can trust be maintained.