Re: [saag] [Secdispatch] Interest COVID-19 'passport' standardization?

Volker Birk <vb@pep-project.org> Sat, 31 July 2021 10:29 UTC

Return-Path: <vb@pep-project.org>
X-Original-To: saag@ietfa.amsl.com
Delivered-To: saag@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B7D523A2104 for <saag@ietfa.amsl.com>; Sat, 31 Jul 2021 03:29:28 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.897
X-Spam-Level:
X-Spam-Status: No, score=-1.897 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_NONE=0.001, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id LG4TfE4pIOSd for <saag@ietfa.amsl.com>; Sat, 31 Jul 2021 03:29:24 -0700 (PDT)
Received: from dragon.pibit.ch (dragon.pibit.ch [185.203.114.4]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id EC7803A2102 for <saag@ietf.org>; Sat, 31 Jul 2021 03:29:23 -0700 (PDT)
Received: from localhost (localhost [127.0.0.1]) by dragon.pibit.ch (Postfix) with ESMTP id C479B21404E9 for <saag@ietf.org>; Sat, 31 Jul 2021 12:29:20 +0200 (CEST)
Received: from dragon.pibit.ch ([127.0.0.1]) by localhost (dragon.pibit.ch [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Ve-OeybbkLOo for <saag@ietf.org>; Sat, 31 Jul 2021 12:29:20 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1]) by dragon.pibit.ch (Postfix) with ESMTPSA id 9F3E7214019D for <saag@ietf.org>; Sat, 31 Jul 2021 12:29:20 +0200 (CEST)
Date: Sat, 31 Jul 2021 12:29:20 +0200
From: Volker Birk <vb@pep-project.org>
To: saag@ietf.org
Message-ID: <20210731102920.hq5knlz26diunq42@pep-project.org>
Mail-Followup-To: saag@ietf.org
X-PGP-Key: https://fdik.org/vb.asc
References: <CAE1ny+4QdmSJS-spV6Do5yDs1x3iAwyHdSx=Oa+cRXU+ESZ2nA@mail.gmail.com> <CABcZeBO56B0YwEm5dbyp1=L_TN+EemoqGt6xDCPzMDRboDZVUw@mail.gmail.com> <7F5A47B0-4E26-4C51-AA21-6A6038A80A95@gmail.com> <CABcZeBNsjFaG9HZJ+0f3Czyikt3zpDkguveBh5id2rCHNNeAZg@mail.gmail.com> <66D90DC4-9BCF-4279-868E-61D5731EC2A4@webweaving.org> <CAE1ny+7AUUrV-yTFt_9Wp-M80yQZXWSgXGBf0TU2ddif92rgBw@mail.gmail.com> <7D1A5E18-4369-47DC-9FC6-A88AF1876AA9@webweaving.org>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="4e7vnaqpoicob2ys"
Content-Disposition: inline
In-Reply-To: <7D1A5E18-4369-47DC-9FC6-A88AF1876AA9@webweaving.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/saag/34sdd-u8-GQYEXvczFLAZV4Y5ao>
Subject: Re: [saag] [Secdispatch] Interest COVID-19 'passport' standardization?
X-BeenThere: saag@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Security Area Advisory Group <saag.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/saag>, <mailto:saag-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/saag/>
List-Post: <mailto:saag@ietf.org>
List-Help: <mailto:saag-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/saag>, <mailto:saag-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sat, 31 Jul 2021 10:29:29 -0000

On Sat, Jul 31, 2021 at 12:02:22PM +0200, Dirk-Willem van Gulik wrote:
> Note tha the DCC does not have a centralised database (and in fact, a
> lot of countries do not have any central database either

No, they don't.

But there is zero chance that the enterprises, which do the checks,
haven't.  Founders of id2020:

https://id2020.org/alliance

Microsoft, Accenture, GAVI Alliance (Bill & Melinda Gates Foundation),
Rockefeller Foundation. See their invests.

Among General Partners:

Mastercard

Who could be the profiteers? Microsoft and Mastercard are already at the
Point of Sale. And the “Covid Pass” is useless without identifying the
person who's showing it.

This will be a gateway tracking of world's population, giving the
gatekeeper role to the corporate world.

BTW: having a central database will be perfectly legal for the
enterprises. “It is needed to do the identification of the person who is
showing the Covid Pass” is excuse enough in most if not in all legal
systems.

You're building dystopia.

Yours,
VB.
-- 
Volker Birk, p≡p project
mailto:vb@pep-project.org
https://pep.software