4 ms·
I'm delighted to see that they have a vulnerability disclosure program for the app too [1]. That's fairly rare for the public sector - the UK Gov and NCSC are
by jamieweb 6y ago
I'm delighted to see that they have a vulnerability disclosure program for the app too [1].
That's fairly rare for the public sector - the UK Gov and NCSC are really leading on this sort of stuff.
[1] https://github.com/nhsx/COVID-19-app-iOS-BETA/blob/master/SECURITY.md https://github.com/nhsx/COVID-19-app-iOS-BETA/blob/master/SE...
- IshKebab 6y agoAgreed. I think the decision to go it on their own and not use Google/Apple's API is completely bone-headed and won't work at all. But given that they made that decision, everything else they've done seems pretty good.