Hacker News Reader

Comment by Hokusai | Hacker News Reader

Certificates in Sweden are valid for 3 months. So, if it's the same for Italy then it's not good but not catastrophic either.

View on HN

Apparently the leaked keys have already been blacklisted. So all certificates signed with the leaked keys will need to be reissued. FWIW, it wasn't the Italian key that was leaked.

They seem to be quite thorough with checking QR certificates in Italy so it doesn't surprize me if this was discovered there.

Very anecdotally I spent three weeks in Italy this summer and my (UK) covid pass wasn't checked even once (In fact I also had to spend 5 days or something in isolation and nobody ever bothered to check or followup). I understand that compliance is very location specific.

In summer it wasn't yet mandatory AFAIK (and in fact Italy was using a slightly different certificate back then)

They got strict in the last month; now if you can't present a pass you might even be refused your salary. There have been demonstrations about this, as you might expect.

I agree that the tracing this summer was less than perfunctory, my brother had your same experience (his girlfriend wasn't even "declared", and nobody checked), and there was no Green Pass at all. Everyone wanted the tourists back so badly that the overall approach was to basically tick checkboxes and leave it at that. They got serious when it became clear the virus would be around all winter because of the Delta variant.

(Italian here) AFAIK Italy implemented the logic to be valid for 9 months, which wasn't ideal and it shows its limit in situations like this since we don't have a short expiry date.

Dunno if in the end they also put in place some kind of blacklisting for leaked certificates

Reply on news.ycombinator.com