Re:Serious privacy/security concerns raised about Portpass v...
by m-p-3 on Monday September 27, 2021 @11:48AM
(#28672164)
> The BC app does not appear to be making any per-verification web calls, so it must have the appropriate Canadian issuer's public key info built-in.
Quebec's app does the same thing, it has the public key builtin for validation. The only time the app can connect is to download an updated list of rules that determine if the enclosed information in the QR code related to vaccine status still protects the owner (and label them as adequately protected if they meet those criterias).
Re:Serious privacy/security concerns raised about Portpass v...
by tlavoie on Monday September 27, 2021 @12:01PM
(#28672385)
Thanks, I was curious about updates here as well. To that end, I don't know if ours does any such updates directly, or if that would come in the form of an app update.
Quebec's app does the same thing, it has the public key builtin for validation. The only time the app can connect is to download an updated list of rules that determine if the enclosed information in the QR code related to vaccine status still protects the owner (and label them as adequately protected if they meet those criterias).