💉📲 On Oct. 22, Ontario is set to launch a new vaccine certificate and verification app. Receipts will be available in the form of QR codes. In the coming months, Ontario will also release another credential called Digital ID. I asked experts about usability and security. [1/12]
https://twitter.com/TheAgenda/status/1445847504130502656
Some vaccination-credential apps have been criticized for how they handle users’ information (see the private PORTpass app: cbc.ca/news/canada/ca…) but generally, cybersecurity experts say systems like Quebec's (similar to what Ontario is doing) should be secure. [2/12]
Ontario has not publicized the source code for its app yet, but as @BrockUniversity professor of digital media @onthename explains, it's likely the QR codes will contain unique URLs that will interface with the app to check users' vaccination status in a govt. database. [3/12] 
Ideally, that should mean little personal information is transmitted. The Ministry of Health has said the Ontario QR code will show only “the minimum amount of information required to verify vaccination” — one’s name and vaccination status. [4/12]
Minimizing data shared is a principle of the Digital ID too. For ex., you could prove age but not show your address. Mauro, though, is concerned about how this tool would work in certain situations, especially those involving law enforcement. Plastic ID won't be replaced. [5/12]
Julia Zarb, a digital health strategist and program director at @UofT_dlsph, says that by quickly implementing its vaccine credential system, Ontario is speeding through the normal process of change management and allowing for flaws and gaps. [6/12]
One such flaw is the potential for fraud. PDF receipts (which will still be usable after Oct. 22) can be edited with common software meaning people can fake them. Mauro calls this “an open invitation to flout the vaccine mandate.” [7/12]
The Ministry of Health did not explain why it has allowed this to be the case, only saying the PDFs have watermarks and that it trusts most Ontarians will "do the right thing."
Zarb says that's an understandable assumption but, "some would say that hope is not a plan." [8/12]
Zarb says that's an understandable assumption but, "some would say that hope is not a plan." [8/12]
QR codes are thought to be much harder to fake and when the new system comes out, the government says it will open source its work so the public can inspect the code (it says the same about the Digital ID). Mauro says this is needed to build trust. [9/12]
.@VassB, who directs the @McMasterU Master of Public Policy Program says government should actively solicit feedback, acknowledging: “this is new and we've got to iron some of this out together."
Zarb says understanding hesitance to share health info is important too. [10/12]
Zarb says understanding hesitance to share health info is important too. [10/12]
For some, no open-source code or empathetic messaging will build trust. Barbara Perry, who directs the Centre on Hate, Bias and Extremism @ontariotech_u, says conspiracies within the anti-public-health movement link vaccine credentials, digital IDs and state control. [11/12]
"I think the key is to continue the messaging and to be very clear and explicit about what information is included in that app so that there's broader public awareness,” she says.
For more on these tools, see my article: tvo.org/article/how-sa… and @TheAgenda on Friday! [12/12]
For more on these tools, see my article: tvo.org/article/how-sa… and @TheAgenda on Friday! [12/12]
Tonight at 8 p.m. ET on @TheAgenda, @JeyanTVO and I discuss how the incoming vaccine certificate QR code and digital ID will work. Happy #CybersecurityAwarenessMonth! 🤖💉📲
Thanks to @carrletta for producing.
Thanks to @carrletta for producing.
https://twitter.com/TheAgenda/status/1446505092383920136?s=20
• • •
Missing some Tweet in this thread? You can try to
force a refresh
