Hacker News Reader

> Reading the passport and its chip implies some terminal authentication capabilities coming from Apple devices

They’ve had some form of this for ages with Apple Pay

Sorry I was meaning to say "passport terminal" capabilities which would require a cert to be issued by a country whose passport chips you want to read. Well maybe they had this for a while but AFAIK you could not read passport details with an apple device before

From that article it looks like all you need to establish a secure connection with the passport is some data that is printed in plaintext on the photo page.

It seems (again, if I'm reading correctly) that you only really need a private key in order to issue a passport.

Yes, that's correct. There have been apps on iOS and Android that can read your passport via NFC for ages. As you noted, all you need is the plaintext information printed on the photo page to generate the Basic Access Control key, which will let you connect to the passport's NFC chip.

Issuing a passport is a different issue entirely, since you need a country's document signing key.

quick note -- I believe you need a separate key to get biometric data out of the passports, but it's been a while since I looked at passport digital infrastructure.

Reply on news.ycombinator.com