Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I dont get why paper docs are still forgeable in this day and age.

Just put a qr code on it containing the same info plus a digital signature, and have verifiers scan it with an app. That sounds a lot more secure than the enduser having an app that the verifier just looks at with their eyes.



The apps being discussed will generate QR codes that the verifier will scan. But these codes are meant to be limited-time codes, so that if a new COVID strain appears and the old vaccines don’t protect against it (or it turns out that annual boosters are necessary), the person will no longer be able to report as vaccinated but will go back to the unvaccinated category.


Does limited time codes really get you anything that putting a date or which vaccine you got wouldn't? Besides, seems a bit overengineered for something that might happen in theory but hasn't yet.


Officers at passport control aren't trained health officials. It can be hard for them to make sense of certificates and understand what vaccinations are valid and which aren't, or which no longer are. That is why governments want to present an app where trained officials at the health ministry have already decided if the person is safe for travel or not, and just show border control officers a green check mark or no.


What is irrelevant again, because those officers will read the QR code with a computer. The computer can summarize to them how valid the vaccine still is.

There is no reason at all why a paper printed QR code can't tell exactly what vaccine you have taken, when you took it, who exactly are you, and what authority is authenticating the data. From there, any extra data is only needed at the time of reading.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: