A fail-closed trust list for passport readers
Why Confrmo only accepts passport evidence from reader software it has been told to trust. How the iPhone reader joined Android's.
What I tried
Confrmo only accepts passport evidence from reading software on its trusted list and turns everything else away. The list started with the Android reader.
Why I chose differently
Passport checks on iPhone needed the iPhone reader on that list too.
What I chose
I added the iPhone reader alongside Android's after backing up the configuration. The fail-closed rule stayed exactly as it was. Android carried on unaffected.
The principle
Fail-closed is right for identity. Adding a platform includes the server's trust list, not just the app.
- Identity verification
- NFC passport
- Fail-closed design
- iOS