2 ms·
Right now it's trivially easy to fake a paper test cert or CDC vax card and no one can verify them at scale without QR/digital signatures. If an authority was
by United857 4y ago
Right now it's trivially easy to fake a paper test cert or CDC vax card and no one can verify them at scale without QR/digital signatures.
If an authority was found to be issuing false test results then revoking the issuer's own signing cert by the next level authority, eg the state health department will solve that trust issue.
- eli 4y agoPKI solves other problems but not this one, where people wanted a valid test but the testing facility cheated. Invalidating historical tests isn’t particularly valuable. After they’re more than a few days old the result rarely matter nor be subject to scrutiny. Notifying affected patients is important but they did that just fine with PKI