Comment by what
7 hours ago
Where did you get the impression the author thinks it’s a bad thing? From the article:
> These are public keys, which are meant to be published - recovering one lets anyone check a signature, not forge one.
7 hours ago
Where did you get the impression the author thinks it’s a bad thing? From the article:
> These are public keys, which are meant to be published - recovering one lets anyone check a signature, not forge one.
I think GP and TFA mean that some of the states are afraid of public-key disclosure.
TFA is a bit obtuse about it, and assumes you've read their previous article on the topic, but from what I gathered, it's about whether the AAMVA would standardize cryptographically signing the barcodes of driver licenses to mitigate creating fakes in the US/CA. Cali showed it's entirely possible, but there's still no pressure for the standard to change across the board.