4 ms·

It seems to contain name and date of birth. Would it be better if it contained the person's ID card number, assuming they have such a thing?

by bloak 5y ago

pmontra 5y ago
Id cards expire and are replaced by new ones with new ids. In my country they expire after 10 years, on the birthday. So about 7 / (365 * 10) = 0.002 % of id cards expired this week here, or 115k cards. I'd store only the name and birthday and let officers check the id card with the usual procedure.
- bloak 5y ago
  It would presumably not be a problem for people to regenerate their QR code when they replace their ID card. They have to regenerate it every day or so anyway. (The QR code in the article expires after 48 hours.) Linking to an ID card number has the slight advantage that the ID card number is unique whereas several people can have the same name and date of birth. It doesn't really help with keeping the name or date of birth private because in practice those things are printed on the ID card which has to be shown together with the QR code. The ideal would be to reveal only the information that is needed in a particular situation. For example, if you're trying to get into an Austrian pub all that's needed is the photograph of the face and confirmation that the person with that face is over 18 and vaccinated. Though in practice people like pub bouncers are not very good at checking faces so having a physical ID card that is hard to counterfeit is an important part of the security. That line of reasoning suggests that what's needed is an ID card with banknote-style anti-counterfeiting measures that shows only a unique number and a photograph while all other information is provided through another channel such as a QR code.
  - pmontra 5y ago
    I generally agree with what you wrote. However: > It would presumably not be a problem for people to regenerate their QR code when they replace their ID card. They have to regenerate it every day or so anyway. (The QR code in the article expires after 48 hours.) A not small number of those 115k people per week are elders without a smartphone or no digital abilities except video calling their children and nephews. Luckily it seems that in my country we'll be able to get a permanent QR code (paper or plastic, don't know.) I'm thinking about getting that one instead of the digital certificate: one less app, no worries about batteries and if it worked for my passport, id card and driver license it will be OK for my covid pass too.
    - pmontra 5y ago
      Autoreply: I got the code to download the certificate. A one page PDF or a PNG with only the QR code. Printed, folded and stored inside my wallet.

It seems to contain name and date of birth. Would it be better if it contained the person's ID card number, assuming they have such a thing?

by bloak 5y ago

It seems to contain name and date of birth. Would it be better if it contained the person's ID card number, assuming they have such a thing?

pmontra 5y ago

Id cards expire and are replaced by new ones with new ids. In my country they expire after 10 years, on the birthday. So about 7 / (365 * 10) = 0.002 % of id cards expired this week here, or 115k cards. I'd store only the name and birthday and let officers check the id card with the usual procedure.

bloak 5y ago
It would presumably not be a problem for people to regenerate their QR code when they replace their ID card. They have to regenerate it every day or so anyway. (The QR code in the article expires after 48 hours.) Linking to an ID card number has the slight advantage that the ID card number is unique whereas several people can have the same name and date of birth. It doesn't really help with keeping the name or date of birth private because in practice those things are printed on the ID card which has to be shown together with the QR code. The ideal would be to reveal only the information that is needed in a particular situation. For example, if you're trying to get into an Austrian pub all that's needed is the photograph of the face and confirmation that the person with that face is over 18 and vaccinated. Though in practice people like pub bouncers are not very good at checking faces so having a physical ID card that is hard to counterfeit is an important part of the security. That line of reasoning suggests that what's needed is an ID card with banknote-style anti-counterfeiting measures that shows only a unique number and a photograph while all other information is provided through another channel such as a QR code.
- pmontra 5y ago
  I generally agree with what you wrote. However: > It would presumably not be a problem for people to regenerate their QR code when they replace their ID card. They have to regenerate it every day or so anyway. (The QR code in the article expires after 48 hours.) A not small number of those 115k people per week are elders without a smartphone or no digital abilities except video calling their children and nephews. Luckily it seems that in my country we'll be able to get a permanent QR code (paper or plastic, don't know.) I'm thinking about getting that one instead of the digital certificate: one less app, no worries about batteries and if it worked for my passport, id card and driver license it will be OK for my covid pass too.
  - pmontra 5y ago
    Autoreply: I got the code to download the certificate. A one page PDF or a PNG with only the QR code. Printed, folded and stored inside my wallet.