3 ms·

It does contain a bit more information than required, such as the specifics of the vaccine. But I think the personal information such as name is required. The c

It does contain a bit more information than required, such as the specifics of the vaccine. But I think the personal information such as name is required. The code needs to be tied to some form of ID otherwise a single code could be copied and used by everyone. So the name and date of birth are likely used so that it can be compared to your drivers license or passport to ensure that the QR code actually belongs to you.

girst 5y ago
>It does contain a bit more information than required, such as the specifics of the vaccine. between eu member states, the acceptance of e.g. sputnik-v (the russian corona vaccine) varies. having the name (or id) of the vaccine in the code allows countries who don't recognize a given vaccine to validate codes issued by other eu nations, who are more open to such a vaccine. (what a horriblly worded sentence, i hope you get what i'm trying to say)
- kevincox 5y ago
  Yes what is "required" is controversial. What I meant to say is that they could have chosen to go for a yes/no type of verdict but instead they chose to let the reader decide if they consider the protection acceptable. Both decisions have pros and cons.
  - distances 5y ago
    What's "acceptable" can vary by country. They couldn't have done this with the acceptance bit only.
    - lxgr 5y ago
      Additionally, the situation is constantly changing. A vaccine effective today might be considered insufficient tomorrow, e.g. due to mutations, new studies etc.
sunshineforever 5y ago
Couldn't someone just generate a fake QR code with their name and DOB on it?
- kevincox 5y ago
  IIUC the data in the QR code is signed, the article mentions it but doesn't show the signature.
- distances 5y ago
  They could also produce a fake vaccination booklet, or fake Covid test result. I'd guess both of these would be easier. All will result in forgery charges if caught. I think the chosen approach is pretty solid for the purpose.
- alkonaut 5y ago
  At the very least it should be signed. Also, the issuing authority is on there so it should be possible to verify the information if necessary too.
- mmcnl 5y ago
  DCC (Digital Covid Certificate it's called, not Digital Green Pass) is essentially a spec for a QR code (as demonstrated nicely in this post) + an EU signing gateway which is used for signing the certificates. The EU acts similar to a CA in case of SSL certificates.
rsynnott 5y ago
> It does contain a bit more information than required, such as the specifics of the vaccine That seems reasonable; it's totally plausible that a future variant defeats a vaccine, and at that point you would want to be able to detect people who'd been given that one.

girst 5y ago

>It does contain a bit more information than required, such as the specifics of the vaccine. between eu member states, the acceptance of e.g. sputnik-v (the russian corona vaccine) varies. having the name (or id) of the vaccine in the code allows countries who don't recognize a given vaccine to validate codes issued by other eu nations, who are more open to such a vaccine. (what a horriblly worded sentence, i hope you get what i'm trying to say)

kevincox 5y ago
Yes what is "required" is controversial. What I meant to say is that they could have chosen to go for a yes/no type of verdict but instead they chose to let the reader decide if they consider the protection acceptable. Both decisions have pros and cons.
- distances 5y ago
  What's "acceptable" can vary by country. They couldn't have done this with the acceptance bit only.
  - lxgr 5y ago
    Additionally, the situation is constantly changing. A vaccine effective today might be considered insufficient tomorrow, e.g. due to mutations, new studies etc.

sunshineforever 5y ago

Couldn't someone just generate a fake QR code with their name and DOB on it?

kevincox 5y ago
IIUC the data in the QR code is signed, the article mentions it but doesn't show the signature.
distances 5y ago
They could also produce a fake vaccination booklet, or fake Covid test result. I'd guess both of these would be easier. All will result in forgery charges if caught. I think the chosen approach is pretty solid for the purpose.
alkonaut 5y ago
At the very least it should be signed. Also, the issuing authority is on there so it should be possible to verify the information if necessary too.
mmcnl 5y ago
DCC (Digital Covid Certificate it's called, not Digital Green Pass) is essentially a spec for a QR code (as demonstrated nicely in this post) + an EU signing gateway which is used for signing the certificates. The EU acts similar to a CA in case of SSL certificates.

rsynnott 5y ago

> It does contain a bit more information than required, such as the specifics of the vaccine That seems reasonable; it's totally plausible that a future variant defeats a vaccine, and at that point you would want to be able to detect people who'd been given that one.