4 ms·
I had tried that before using Mathematica instead of a website and I was also surprised to see the data in the barcode is not really signed in any way. IIRC it
by carlob 11y ago
I had tried that before using Mathematica instead of a website and I was also surprised to see the data in the barcode is not really signed in any way. IIRC it was a European low cost like Ryan air, and I thought it was scary that I could have generated the same exact bar code just by knowing my name and the flight.
Of course there is an extra step of validation, because the airline has the passenger list, so you can't just add yourself to a flight.
- scrollaway 11y agoCynical me wonders if it's like this on purpose for the benefit of law enforcement. But then again, Hanlon's razor...
- icebraining 11y agoIn what way would it benefit them?
- carlob 11y agoI think the only purpose that code bar serves is so that the person at the gate doesn't have to strike a line on a printed list.
- thomasjoulin 11y agoThe boarding pass format spec linked in the article [1] shows the support for signing (page 49, fields 25 onwards) The boarding pass data is still plaintext as explained, but a signature is appended to validate that the content has not been tempered with, and who generated it. I think boarding pass signing is mandatory on all U.S. airlines at least but I have no source for that [1] http://www.iata.org/whatwedo/stb/documents/bcbp_implementation_guidev4_jun2009.pdf http://www.iata.org/whatwedo/stb/documents/bcbp_implementati...