"universal link" feature for event-organisers about nl-covid19-coronacheck-app-ios HOT 6 CLOSED

While I understand the rationale, there is not guarantees that the Ajax app will never send any of the corona check data correct? That's what makes this difficult to implement I think.

from nl-covid19-coronacheck-app-ios.

Ajax-app will never receive any "positive" measurement, that is controlled by the corona-check app (which only will send a "OK" if valid). If invalid there will be many posibilities (invalid test-date, positive test, wrong initial, wrong birth-month, wrong birth-year)

from nl-covid19-coronacheck-app-ios.

Ha @MaxReckers , oude bekende. Wij hebben vroeger toen ik nog bij Triple zat nog samen dingen gedaan met Google Glass! Kleine wereld! 🙂

On topic:
Fair point regarding the possibilities for a 'negative' measurement, I hadn't thought of it in that way. Will read up some more on the project.

from nl-covid19-coronacheck-app-ios.

Thanks for this suggestion! Although it’s technically probably not impossible to connect the two apps, the difficulty is that even a simple ‘ok’ is a ‘bijzonder persoonsgegeven’. Therefor, it’s currently not up to us as engineers; the discussion is passed through and will be addressed on the policy / legal table. So I suggest to close this issue for now awaiting discussions elsewhere.

(Something to consider in the mean time: an ‘ok’ as suggested would have to get some form of signature or authentication, to prevent someone from manually constructing the universal link. The site association file only limits which app can open the link, not which one can call it)

from nl-covid19-coronacheck-app-ios.

Hi Ivo, As this is a real showstopper for us I would kindly ask your support to not close this issue and find a technical solution.
It is just not possible to have a crowd this big without proper guidance from the organiser perspective.
Also very tough that Freek has never been able to address this issue internally.

Our privacy lawyers do not agree with your "bijzonder persoongsgegeven" statement and are prepared and ready for the "table", anytime.

Technically there are multiple solutions we can work out, depending if you want to keep all communication between the apps or involve a backend.

1. (all local) -> public/private key encryption with a nonce which is stored in Ajax app after submission
2. (mixed) -> send the QR-token, use a sdk/api with your current corona-check app technology

Can we consider a technical meeting?

Regards,

Max

from nl-covid19-coronacheck-app-ios.

The deeplink has meanwhile been implemented and its documentation can be found here:

https://github.com/minvws/nl-covid19-coronacheck-provider-docs/blob/main/docs/app-deeplinks.md

Other enhancements are currently being discussed, but since this is the original ticket from April, I'll close this one for now.

from nl-covid19-coronacheck-app-ios.