If they are a US citizen, they must scan both driver's license/state ID/passport/military ID and social security card. If not a US citizen, they must scan their home country's passport and if they come from a country that requires one, their visa.
Also, require the purchaser to type in (not check a box, but actually type the words and disable the browser's paste function) "I swear under penalty of perjury that I will not transfer this ticket to anyone else and that I will do everything I am physically capable of to not let anyone do so on my behalf".
You could use the same logic to excuse storing passwords in plain text instead of hashes.
> Also, require the purchaser to type in (not check a box, but actually type the words and disable the browser's paste function) "I swear under penalty of perjury that I will not transfer this ticket to anyone else and that I will do everything I am physically capable of to not let anyone do so on my behalf".
I don't understand what this is meant to accomplish.
No, I think a cheek swab should be sufficient.
This is evil. Browsers should not even permit basic UI functions like paste or context menu to be overridden by arbitrary sites. Fortunately, it's not difficult to put together a script that simulates typing in the contents of the clipboard, which is my go-to solution for sites that disable paste. (Ctrl-V doesn't work? Just press Ctrl-Shift-V instead. It takes a few milliseconds longer but gets the same result.)
> If they are a US citizen, they must scan both driver's license/state ID/passport/military ID and social security card. If not a US citizen, they must scan their home country's passport and if they come from a country that requires one, their visa.
A single decent image of an official photo ID, checked at the gate, should be more than sufficient to prevent unauthorized ticket transfers. However, I would only apply this system to a small minority of discounted promotional tickets; non-promotional tickets should be sold at the fair market-clearing price, freely transferable, and usable by any bearer with no ID verification required.
I wonder if this might be an anti-trust issue?
https://www.theverge.com/2018/8/7/17659746/tokyo-2020-olympi...
Also you made a python face recognition library right? I like it a lot, so thanks for making it!