%% wrote:
I dare say it wouldnt be too hard to make an app that could look up this
info.

It still depends on 'me' proving the app is on 'my' phone. This is
the bit that I don't understand really (though I'm not totally
convinced that the NHS records are so securely related to a particular
person).

How do you guarantee that the mobile phone that has the 'inoculation
passport' on it is that of the person whose NHS record says that they
have been inoculated? It's not like a passport which has a picture of
'me' in it. I can own lots of mobile phones, I can transfer them to
other people, I can change the fingerprint that unlocks them, mobile
phones are *not* locked for ever to their current owners.

Clearly not a problem with digital passports and driver's licenses.

Why?

I walk up to passport control with my (digital or not) passport and a
mobile phone. The passport has a photograph of me on it and, maybe,
even more specific identity information which proves pretty certainly
it's my passport. OK, that's good.

What sort of proof is there that that the phone which has the covid-19
passport on it is mine? ... or that the covid-19 app on it is
connected to my inoculation record?

--
Chris Green
·