News for hackers. Stuff that matters.

A comment on TracePrivately – open-source sample app using Apple's contact tracing framework. Parent comment

Re:TracePrivately – open-source sample app using Apple's con... by devit on Sunday April 19, 2020 @07:23PM (#22919648)
They should only accept infection reports that are signed with a trust chain terminating with an Apple/Google internal CA, and sign keys provided by governments with their root CA.

Alternatively, the system could be configured to connect to the "infected keys server" run by the local government(s), as determined by the countries of the cell network the user connected to in the last 30 days.

[ Parent | on HN ]
Re:TracePrivately – open-source sample app using Apple's con... by 0xBeefFed on Sunday April 19, 2020 @07:51PM (#22919794)
Other protocols have suggested that uploads be governed by authorization codes provided by health-care providers. Another suggests having providers digitially sign records uploaded to the server too.
[ Parent | on HN ]