Hacker News Reader

> In a digital passport it suddenly my burden to prove it through the intervention of a server

Maybe I did not read the article well enough, but why would these passports not be simple signed certificates? No need for any network of third party to check whether they were signed by a trusted authority.

View on HN

Because private certificate may leak and it will be difficult if not impossible to tell a fake from the real thing. I believe at one point this happened with Covid passports in some countries.

If it did leak, why wouldn’t they just revoke and then reissue the valid passports with a new private key?

The same argument could be made about the possibility of a CA’s key being leaked.

Reissuing passport for the entire population is not exactly practical, plus you'll be having a period when you can't tell who has a legit passport, so probably everyone would have to be treated as a potential criminal.

Yes but the EU already has digital signatures.

Also if the private cert is in the Secure Enclave it’s harder to leak.

But also your physical passport can be stolen

Reply on news.ycombinator.com