undefined | Better HN

0 pointssupertrope5y ago0 comments

It's a cheap way out. Anti-counterfeiting feasures like color shifting ink, paper feel, polymers, watermarks, microprinting, UV strips cannot be checked over a webcam.

Original paper documents are an anachronism. Any serious ID verification involves phoning home. Like police searching their database, border guards scanning your passport, or calling the car insurance company. Visa has depreciated offline EMV transactions. Offline credentials can't revoked so there's only the expiration date.

0 comments

1 comments · 1 top-level

Aaargh203185y ago

You don’t need to call the issuer. The NFC chip contains data signed by the issuing country. All you need is a list of trusted country CA’s.

You can check if it’s an original by performing a challenge/response protocol. You can read a public key from the signed data, the private key is not externally accessible. You ask the chip to sign some data with it’s private key and you check against the public key.

You can do all this from a mobile phone.

j / k navigate · click thread line to collapse