4 ms·
Because private certificate may leak and it will be difficult if not impossible to tell a fake from the real thing. I believe at one point this happened with Co
by varispeed 4y ago
Because private certificate may leak and it will be difficult if not impossible to tell a fake from the real thing.
I believe at one point this happened with Covid passports in some countries.
- martimarkov 4y agoYes but the EU already has digital signatures. Also if the private cert is in the Secure Enclave it’s harder to leak. But also your physical passport can be stolen
- dan1234 4y agoIf it did leak, why wouldn’t they just revoke and then reissue the valid passports with a new private key? The same argument could be made about the possibility of a CA’s key being leaked.
- varispeed 4y agoReissuing passport for the entire population is not exactly practical, plus you'll be having a period when you can't tell who has a legit passport, so probably everyone would have to be treated as a potential criminal.