Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Does the app present the original QRCode? #13

Closed
rumpelrausch opened this issue Jun 10, 2021 · 2 comments
Closed

Does the app present the original QRCode? #13

rumpelrausch opened this issue Jun 10, 2021 · 2 comments

Comments

@rumpelrausch
Copy link

...or does it modify it in any way befor presenting?
Background:
Why should people use this app if they could just take a photo of the original code?

@f11h
Copy link

f11h commented Jun 10, 2021

Modifying the QR Code is not possible because this would break the signature and your certificate is invalid.
The core competence of this app is to scan verify and present your QR Code.

Yes, just storing the Code on your phone would have the same effect, but this is a more comfortable way. Also the risk of accidentally deleting the qr code is much higher when storing it in you gallery.

@rumpelrausch
Copy link
Author

Thanks for your comment. I understand the QRCode is just passed through. Cross signing the cert again via the app wouldn't be safer anyway because the priv key would be part of the app.

I was just wondering because nobody seems to emphasize upon this; It looks as though people are urged to use an app even though it's not needed. Google shows a text snippet "Natürlich können Sie Ihren Digitalen Impfnachweis (Ausdruck oder Karte) auch kopieren oder gar abfotografieren." from the UBIRCH FAQ which seems to be removed now.

I don't agree upon the issue about loss of data. If people secure anything nowadays then it's their photo archive. It lives on forever in one or another cloud storage. Losing your photos means losing your life, that's Zeitgeist.

Anyway, my question is gladly answered and I'm closing the issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants