7 ms·
May I ask what this would make easier for <kids? I can think of clubs scannings IDs, but scanners only store identification details for some period of time, un
by Qqqwxs 7y ago
May I ask what this would make easier for <kids?
I can think of clubs scannings IDs, but scanners only store identification details for some period of time, until they're deleted, and not compared against a database. [0] A spoofable/transferable QR code could contain all the information normally scanned on a license plus information unique to each code refresh.
I'd love to hear what the other implications of this could be if I'm missing something.
[0] https://www.liquorandgaming.nsw.gov.au/operating-a-business/liquor-licences/liquor-licence-conditions-and-precincts/id-scanners https://www.liquorandgaming.nsw.gov.au/operating-a-business/...
- mkj 7y agoI was thinking if they're used offline at a bottle shop, it's a lot easier to seamlessly alter a date of birth or photo on a phone app than a physical license. Also makes it easier to share an older sibling's ID.
- Nextgrid 7y agoNot really. If the offline license is in a digital format (QR code, etc) it can still be checked whether it’s been signed by a trusted authority (the state’s digital certificate, etc). So you can very well have an offline system where the documents are signed during enrolment but then stored offline.
- mkj 7y agoOnly if the trusted authority sends back a copy of all the details too, and person at the counter looks at those instead. Otherwise the altered app can show a different photo to that which was enrolled, etc. The signature is on bytes, not the offline visual representation.
- angry_octet 7y agoUnfortunately that does not seem to be what they have done, i.e. no signatures involved.
- Nextgrid 7y agoIn this case it’s a problem with the current implementation, but does not prevent a proper implementation from existing in the future.