#covpass
Crypto is hard. Certificate validation can be too. GDATA says the German Coronavirus Warning App (CWA), which got added a digital certificate wallet function to recently, lacks any validation.
The researchers were able to add Robert Koch's certificate (*1843) to the app - the only criterion the app checks is that two weeks since the 2nd shot have passed. Oh, a century? Never mind, here you go. >_<
To be fair, the recommended way is using the official CovPass App, which does the self-evident check.
https://www.gdata.de/blog/digitaler-impfnachweis-schwaechen-bei-der-sicherheit
#cwa #gdata #certificates #certificate #validation #fail #covpass #crypto