Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Yup to us techies it seems obvious that you should have a digital signature.

But for whatever reason, this wasn't done.



You can't have digital signatures without all of the attendant PKI baggage. And if you're going to implement all of the PKI baggage, might as well go all the way and start issuing people smart cards.


It doesn't need to be full PKI. Just link to some internal website ran by the State that spits out DB info about how "Joe's license, numberd 01010101 is valid". Georgia already does this for temporary license plates (Pardon the TLS 1.1): https://www.gada.com/index.php?module=FileShare&func=downloa...


I think the issue is you'll only achieve restricting things to cloned licenses instead of arbitrary fakes (which might still be an improvement).


Sure, why not? What’s stopping us?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: