‹ BackHN Continuity

Thread

Keys Not Included: recovering the signing keys for US driver's license barcodes

289 points · 152 comments · Ryan5453

  1. bob1029 · · focus · HN ↗
    I think mDL is going to be a pretty big deal in some industries (e.g. banking). Apple announced an ecosystem around this at WWDC25. Very soon we are going to be in a world where you walk into a bank to open/maintain an account and the following occurs:

    1. The bank emails/SMSes the customer a link

    2. The customer takes out their iPhone, opens whatever email/messaging software & taps the link

    3. The link takes the customer to a specially crafted page owned by the bank that triggers a native OS process for opening Apple Wallet and gathering requested ID details with consent.

    <a href="https:&#x2F;&#x2F;developer.apple.com&#x2F;videos&#x2F;play&#x2F;wwdc2025&#x2F;232" rel="nofollow">https:&#x2F;&#x2F;developer.apple.com&#x2F;videos&#x2F;play&#x2F;wwdc2025&#x2F;232 <a href="https:&#x2F;&#x2F;www.w3.org&#x2F;TR&#x2F;digital-credentials" rel="nofollow">https:&#x2F;&#x2F;www.w3.org&#x2F;TR&#x2F;digital-credentials

    This is potentially a superior arrangement because it could eventually establish a strong cryptographic chain of trust all the way to the issuer (e.g. the State of Alabama). Right now there are some gaps in that chain but I see no reason they couldn&#x27;t be closed over time.

    1. ds_opseeker · · focus · HN ↗
      &gt; there are some gaps in that chain

      for example, a reliance on apple wallet, instead of an open standard.

      With that quibble aside, I do like the basic structure of your solution.

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.