Re:Stockholm parents built their own school app, then the ci...
by munk-a on Thursday November 04, 2021 @03:23PM
(#29111460)
I think it depends on the outcome of the case - I could see some possible resolution like the Swedish supreme court declaring that JSON counts as a public record and that forcing a block on prohibitive encryption of JSON endpoints offered by the government (assuming everything the OP said about constitutionality is correct).
We've seen such bizarre technical decisions from high courts before.
Re:Stockholm parents built their own school app, then the ci...
by aliswe on Thursday November 04, 2021 @04:50PM
(#29112398)
I dont think the swedish legal system uses precedents though. Does that matter?
Re:Stockholm parents built their own school app, then the ci...
by munk-a on Thursday November 04, 2021 @05:13PM
(#29112611)
I don't know - I think all legal systems use precedents to a certain extent - they're just extremely formalized in America and Britain. Sorry but I'm not familiar enough with their system to reply with confidence but I would say that if a high court in a country rules a certain way, even if that isn't binding to future rulings, it will cause people to adjust their behavior to avoid falling into a trap that's been clearly called out already.
Uh, also, IANAL.
I agree with the rest of your argument, but I think that this part is not necessarily a good example of the risks. Far easier would be to use a shared key between the app and the site, and thus use encryption to prevent reading the data, while still sending it in JSON over HTTPS. A pinned certificate would do the trick, at least on phones which prevent the user from inspecting app bundles.