Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> that only governments have

:-)



Do share :)


A corrupt government official selling a copy of that key to the highest bidder just sounds like the free market to me /s


"Dutch journalist buys fake Syrian passport with prime minister’s photo" - https://www.dutchnews.nl/2015/09/dutch-journalist-buys-fake-...


does not say anything about it passing digital checks


Why would they make such an important key be copyable?


To be useful, that key needs to be present in countless border checkpoint or even police devices, so it's inherently very hard to keep secret.

That's a known trade-off, and I believe some countries accordingly restrict access to their own national authorities (which usually already have access to that data via other means, since they're issuing the document).


You wouldn't need the key to be copyable though - it can be an online check - ie. passport sends challenge, terminal sends challenge to government-hosted HSM, HSM sends response.


Good point, but that's in the end a typical availability/security tradeoff, and I could imagine that at least some verifying authorities would rather err on the side of the former.


Imagine, there are a lot of borders and pösces where duch control happens where internet is not guaranteed.


The way computer security people and government officials understand keys and key handling practices is vastly different.


It’s obviously not a free market. You have to bribe someone, which is by definition not free. /s


Free as in freedom ;)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: