Re: [113attendees] US Vaccine Record (QR code for MASS residents)

Toerless Eckert <tte@cs.fau.de> Mon, 28 March 2022 14:27 UTC

Return-Path: <eckert@i4.informatik.uni-erlangen.de>
X-Original-To: 113attendees@ietfa.amsl.com
Delivered-To: 113attendees@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 95DFD3A11FE for <113attendees@ietfa.amsl.com>; Mon, 28 Mar 2022 07:27:04 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.34
X-Spam-Level: *
X-Spam-Status: No, score=1.34 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, GB_RUURL=3, HEADER_FROM_DIFFERENT_DOMAINS=0.248, RCVD_IN_DNSWL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Zl58bydIPirf for <113attendees@ietfa.amsl.com>; Mon, 28 Mar 2022 07:27:00 -0700 (PDT)
Received: from faui40.informatik.uni-erlangen.de (faui40.informatik.uni-erlangen.de [131.188.34.40]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id F3F8A3A11F1 for <113attendees@ietf.org>; Mon, 28 Mar 2022 07:26:59 -0700 (PDT)
Received: from faui48e.informatik.uni-erlangen.de (faui48e.informatik.uni-erlangen.de [131.188.34.51]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits)) (No client certificate requested) by faui40.informatik.uni-erlangen.de (Postfix) with ESMTPS id E0FDB549C87; Mon, 28 Mar 2022 16:26:53 +0200 (CEST)
Received: by faui48e.informatik.uni-erlangen.de (Postfix, from userid 10463) id D8B634EAA4D; Mon, 28 Mar 2022 16:26:53 +0200 (CEST)
Date: Mon, 28 Mar 2022 16:26:53 +0200
From: Toerless Eckert <tte@cs.fau.de>
To: Alexandre Petrescu <alexandre.petrescu@gmail.com>
Cc: 113attendees@ietf.org
Message-ID: <YkHFrRr9mWwjWbDY@faui48e.informatik.uni-erlangen.de>
References: <BYAPR05MB56549BAFE2F0BD53A4667EB0D41A9@BYAPR05MB5654.namprd05.prod.outlook.com> <Yj2SzR81JwElN6/R@puck.nether.net> <BL0PR05MB5652ECBC4B82A1A2BDF99F7AD41A9@BL0PR05MB5652.namprd05.prod.outlook.com> <c821f0ca-df17-f8c1-8588-57abdfdd050e@gmail.com> <Yj2fxYT2Gm2rLIxb@faui48e.informatik.uni-erlangen.de> <f8a45d20-6781-d9d5-e871-574e5a8e6d66@gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <f8a45d20-6781-d9d5-e871-574e5a8e6d66@gmail.com>
Archived-At: <https://mailarchive.ietf.org/arch/msg/113attendees/qn4XA817_lLt3dEVVLmXDMeWEyY>
Subject: Re: [113attendees] US Vaccine Record (QR code for MASS residents)
X-BeenThere: 113attendees@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Mailing list for IETF 113 attendees <113attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/113attendees>, <mailto:113attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/113attendees/>
List-Post: <mailto:113attendees@ietf.org>
List-Help: <mailto:113attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/113attendees>, <mailto:113attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 28 Mar 2022 14:27:05 -0000

I didn't say that a law/regulation making entity should change what it approves
to be sufficient proof of vaccination to be allowed for certain things. I was only
pointing out that applications could easily be developed to show USA or EUROPE (or any
other region) Vax record (checked) .. or the like. And they don't. Instead the opposite
happens: even though we've got millions of transcontinental travellers and many places where
this would be useful, installation of applications from other continents is made
difficult if not impossible by private companies (google etc.) region fencing.

90% of the time my vax record was checked in the last months, the checker just
 eyeballed a QR code on the phone with my name beside it, not checking with a
phone, and in the 10% of cases where a phone was used to check, only 1% checked
by ID card.

Imagine how in this world like this, an app that would work across continents would work:
MRNA Vaccinated travellers from US to Europe or vice versa do meet the actual mutual
vaccination requirement. They may just not meet the local paperwork requirement. So
an app like this would IMHO help a lot.

Anyhow...

On Mon, Mar 28, 2022 at 03:23:45PM +0200, Alexandre Petrescu wrote:
> 
> Le 25/03/2022 à 11:56, Toerless Eckert a écrit :
> > I don't even need Russia and its wars. Since covid started, i can not officially
> > install european covid applications on my google-USA registered android
> > "Smart"phone. Contact tracing, vax-records, what have you.
> > 
> > Heck, how difficult would it be to build a simple check-vax-record app that
> > simply has all the checking for EU und US QR codes ?
> 
> A difficulty lies deep in the medical and health difference between peoples
> of different countries.  Two persons from different countries are different
> not only facing covid, but different too facing various other health risks.
> 
> Limits in exposition are set differently in different countries. The
> 'exposition' are to covid but also to sugar, cholesterol, electromagnetic
> waves or radiation.
> 
> It is because of these differences that we dont have common vax records or
> contact traces.
> 
> Until health indicators become more universal like time units are (seconds,
> years, are all the same), we will be stuck with health differences like the
> temperature differences celsius-fahrenheit.
> 
> We dont become another person when crossing a frontier... the health record
> conversions make little sense if at all.
> 
> Alex
> 
> > 
> > The Internet of course has already become the prime tunnel provider to
> > "VPN"s with headends in the splinters where you want to absorb a service.
> > 
> > But that alone does not help for the issue i describe, because the splintering
> > goes through all layers.
> > 
> > Cheers
> >      Toerless
> > 
> > P.S: RT today
> > 
> > On Fri, Mar 25, 2022 at 11:43:09AM +0100, Alexandre Petrescu wrote:
> > > Le 25/03/2022 à 11:12, Jeffrey (Zhaohui) Zhang a écrit :
> > > > Myvaxrecords.mass.gov may get me a QR code but it is not accessible here.
> > > I confirm http://myvaxrecords.mass.gov/ is not visible from France, just
> > > tried.  It tells '403 Error [...] The Amazon CloudFront distribution is
> > > configured to block access from your country. [...]' and there are more
> > > explanations.
> > > 
> > > Generally speaking there are very many instances right now of impossibility
> > > to access web sites on the Internet.
> > > 
> > > - some reasons are related to COVID and the potentially large number of
> > > legitimate requesters.  Some QR-related covid site in USA forbids access
> > > from anywhere else than just USA. I suspect it might be the case the other
> > > way around too, some EU sites related to covid and QR-codes might be
> > > accessible only from Europe, because of same reason of large number of
> > > legitimate requesters.
> > > 
> > > - some websites in USA, in particular related to news, refuse to abide to
> > > the GDPR  of the EU ruling.  For these, some sites simply block the access
> > > to Europeans simply by saying they dont want to request the user to 'Accept
> > > All Cookies', and they block these users.
> > > 
> > > - war-related: some websites are under continuous DDoS attacks and simply
> > > cant reply, since 4 weeks now.  These blocked sites are in large part in
> > > Russia and in the war wone, but there are also outside the war zone.
> > > 
> > > - war-related and government-imposed:
> > > 
> > >      - several websites like facebook and instagram are simply blocked of
> > > access in Russia.    There is a list.
> > > 
> > >        RT.com and other TV channels from Russia are forbidden access outside
> > > Russia, can no longer be seen.  The way the website is forbidden is
> > > somewhere in a middle box, by a forced filter.  It is not a gentle message
> > > saying 'forbidden access because of war', it is simply a timeout in the
> > > browser.
> > > 
> > > Some strange situation appears: the site news.google.com is forbidden in
> > > Russia, after long analysis by Russian authorities, and confirmed by
> > > Google.  But the news from News.ru (an official Russian news site, in
> > > Russian only) is also provided through the news.google.com website and it is
> > > suggested to be read on Google ("Читайте нас в Google Новости", it means
> > > "Read us in Google News" https://news.ru/world/zelenskij-poprosil-u-stran-nato-voennuyu-pomosh-bez-ogranichenij/)
> > > One would have expected that when news.google.com is forbidden in Russia
> > > that the Russian news agencies stop posting on them to; it is strange for
> > > Russia to forbid the Russian citizens access to news.google.com but at the
> > > same time to post news on it.  That is a very strange situation.
> > > 
> > > These are examples of problems of how Internet is no longer working like
> > > before.
> > > 
> > > Alex
> > > 
> > > 
> > > > Jeffrey
> > > > 
> > > > 
> > > > Juniper Business Use Only
> > > > 
> > > > -----Original Message-----
> > > > From: Jared Mauch <jared@puck.nether.net>
> > > > Sent: Friday, March 25, 2022 6:01 AM
> > > > To: Jeffrey (Zhaohui) Zhang <zzhang@juniper.net>
> > > > Cc: 113attendees@ietf.org
> > > > Subject: Re: [113attendees] US Vaccine Record (QR code for MASS residents)
> > > > 
> > > > [External Email. Be cautious of content]
> > > > 
> > > > 
> > > >           You can scan in the paper QR code with an application or take a photo and upload it with most services.  My negative test result had a QR code and I utilized the https://urldefense.com/v3/__https://covidpass.marvinsextro.de/__;!!NEt6yMaO-gk!QqQi5lXsThfQ9ssSfWNhsVM-jksyK465_nhitcorhrOyPVvPprm9FjXyR_IR6W78$  to load that code into my phone wallet as well, in addition to my US vax card which I loated via the MyChart application from my US health care provider.
> > > > 
> > > > I suggest uploading the QR code you got.
> > > > 
> > > > - Jared
> > > > 
> > > > (aside: I've found there's many US local government sites that must have some local firewalls or something that block the use of services from
> > > > EU)
> > > > 
> > > > On Fri, Mar 25, 2022 at 09:45:57AM +0000, Jeffrey (Zhaohui) Zhang wrote:
> > > > > Hi,
> > > > > 
> > > > > 
> > > > > 
> > > > > I have my paper vaccine record with me, and I've got my negative result this morning (within 24 hours of my first segment of flight tomorrow).
> > > > > 
> > > > > When I tried to check in online with Lufthansa, I was asked to upload my vaccine proof *with a QR code*.
> > > > > 
> > > > > 
> > > > > 
> > > > > I don't have that QR code. Supposedly, I can get it from myvaxrecords.mass.gov, but I'm getting the following error (see end of my email) when I try to access it, with all the following attempts:
> > > > > 
> > > > > 
> > > > > 
> > > > >     *   w/ or w/o via my company's VPN
> > > > >     *   Chrome or Edge browser
> > > > >     *   On my PC or my phone (wifi connection)
> > > > > 
> > > > > 
> > > > > 
> > > > > I'd like to ask:
> > > > > 
> > > > > 
> > > > > 
> > > > >     *   Is paper record (no QR code) acceptable for check-in at the airport (I'd just skip online check-in)?
> > > > >     *   Can you access myvaxrecords.mass.gov?
> > > > > 
> > > > > 
> > > > > 
> > > > > Thanks!
> > > > > 
> > > > > Jeffrey
> > > > > 403 ERROR
> > > > > The request could not be satisfied.
> > > > > ________________________________
> > > > > The Amazon CloudFront distribution is configured to block access from your country. We can't connect to the server for this app or website at this time. There might be too much traffic or a configuration error. Try again later, or contact the app or website owner.
> > > > > If you provide content to customers through CloudFront, you can find steps to troubleshoot and help prevent this error by reviewing the CloudFront documentation.
> > > > > ________________________________
> > > > > Generated by cloudfront (CloudFront)
> > > > > Request ID: 3UIeeRurjZRpmsyxgPIi_HKkp6-K4lYKd30QyYoq6It1N3jejO9BOQ==
> > > > > 
> > > > > 
> > > > > 
> > > > > 
> > > > > Juniper Business Use Only
> > > > > --
> > > > > 113attendees mailing list
> > > > > 113attendees@ietf.org
> > > > > https://urldefense.com/v3/__https://www.ietf.org/mailman/listinfo/113a
> > > > > ttendees__;!!NEt6yMaO-gk!QqQi5lXsThfQ9ssSfWNhsVM-jksyK465_nhitcorhrOyP
> > > > > VvPprm9FjXyR-7qxJp0$
> > > > --
> > > > Jared Mauch  | pgp key available via finger from jared@puck.nether.net
> > > > clue++;      | https://urldefense.com/v3/__http://puck.nether.net/*jared/__;fg!!NEt6yMaO-gk!QqQi5lXsThfQ9ssSfWNhsVM-jksyK465_nhitcorhrOyPVvPprm9FjXyRwI4Wzyc$   My statements are only mine.
> > > > 
> > > -- 
> > > 113attendees mailing list
> > > 113attendees@ietf.org
> > > https://www.ietf.org/mailman/listinfo/113attendees

-- 
---
tte@cs.fau.de