Keys Not Included: recovering the signing keys for US driver's license barcodes
Thread
Unofficial Hacker News client; not affiliated with Y Combinator.
Keys Not Included: recovering the signing keys for US driver's license barcodes
Unofficial Hacker News client; not affiliated with Y Combinator.
bob1029 · · focus · HN ↗
1. The bank emails/SMSes the customer a link
2. The customer takes out their iPhone, opens whatever email/messaging software & taps the link
3. The link takes the customer to a specially crafted page owned by the bank that triggers a native OS process for opening Apple Wallet and gathering requested ID details with consent.
<a href="https://developer.apple.com/videos/play/wwdc2025/232" rel="nofollow">https://developer.apple.com/videos/play/wwdc2025/232 <a href="https://www.w3.org/TR/digital-credentials" rel="nofollow">https://www.w3.org/TR/digital-credentials
This is potentially a superior arrangement because it could eventually establish a strong cryptographic chain of trust all the way to the issuer (e.g. the State of Alabama). Right now there are some gaps in that chain but I see no reason they couldn't be closed over time.
ds_opseeker · · focus · HN ↗
for example, a reliance on apple wallet, instead of an open standard.
With that quibble aside, I do like the basic structure of your solution.