Keys Not Included: recovering the signing keys for US driver's license barcodes
Thread
Unofficial Hacker News client; not affiliated with Y Combinator.
Keys Not Included: recovering the signing keys for US driver's license barcodes
Unofficial Hacker News client; not affiliated with Y Combinator.
bob1029 · · focus · HN ↗
1. The bank emails/SMSes the customer a link
2. The customer takes out their iPhone, opens whatever email/messaging software & taps the link
3. The link takes the customer to a specially crafted page owned by the bank that triggers a native OS process for opening Apple Wallet and gathering requested ID details with consent.
<a href="https://developer.apple.com/videos/play/wwdc2025/232" rel="nofollow">https://developer.apple.com/videos/play/wwdc2025/232 <a href="https://www.w3.org/TR/digital-credentials" rel="nofollow">https://www.w3.org/TR/digital-credentials
This is potentially a superior arrangement because it could eventually establish a strong cryptographic chain of trust all the way to the issuer (e.g. the State of Alabama). Right now there are some gaps in that chain but I see no reason they couldn't be closed over time.
iAMkenough · · focus · HN ↗
“But my phone isn’t a wallet. My wallet is a wallet.”
DaSHacka · · focus · HN ↗