←back to thread

287 points robin_reala | 1 comments | | HN request time: 0.207s | source
Show context
wkat4242 ◴[] No.44375589[source]
Many passports also contain digitized fingerprint scans. But those are even harder to access. You need a private key that only governments have.
replies(2): >>44376354 #>>44377674 #
jwr ◴[] No.44377674[source]
> that only governments have

:-)

replies(2): >>44377814 #>>44377820 #
connicpu ◴[] No.44377820[source]
A corrupt government official selling a copy of that key to the highest bidder just sounds like the free market to me /s
replies(3): >>44378535 #>>44379278 #>>44380483 #
charcircuit ◴[] No.44379278[source]
Why would they make such an important key be copyable?
replies(2): >>44379843 #>>44380875 #
lxgr ◴[] No.44379843[source]
To be useful, that key needs to be present in countless border checkpoint or even police devices, so it's inherently very hard to keep secret.

That's a known trade-off, and I believe some countries accordingly restrict access to their own national authorities (which usually already have access to that data via other means, since they're issuing the document).

replies(1): >>44381275 #
Nextgrid ◴[] No.44381275[source]
You wouldn't need the key to be copyable though - it can be an online check - ie. passport sends challenge, terminal sends challenge to government-hosted HSM, HSM sends response.
replies(2): >>44381595 #>>44381859 #
1. chrisandchris ◴[] No.44381859[source]
Imagine, there are a lot of borders and pösces where duch control happens where internet is not guaranteed.