Hacker News Reader

How does a short lifetime of the certs help with 3rd parties building these databases you mention?

Once the certificate becomes obsolete, it becomes useless and therefore needs to be reacquired. Same process with American SSNs, if they were depreciated very 6 months getting yours published wouldn’t be an issue.

But one of these passes is nearly worthless (in the sense of impersonation) if you don't also have a valid ID of the person it got issued to and you look the same.

When my vaccination pass would "leak" then my name & birthdate would be leaked and they would know someone of that name and birthdate got vaccinated but other than that, they can't impersonate me as if they presented the pass they would be asked to show the corresponding ID as well.

The danger is not the pass itself. It's that you'd be prompted to display it systematically for any and all activities.

Reply on news.ycombinator.com