With Apple I’m always fairly curious about the implementation. If the data is stored securely and if implemented thoughtfully, I am somewhat interested in adding my Passport to the wallet app.
What privacy or security concerns do you have around this feature? Does Apple make any claims around its implementation that alleviate your concerns? What is not addressed?
Claims I have seen so far:
Data is encrypted end-to-end, and never leaves your device without your consent.
Your passport data is stored in the Secure Enclave of your iPhone.
Face ID or Touch ID is required each time you access or present the Digital Passport.
Apple and issuing authorities cannot track where or when your ID is used
It would be a tap-to-share-info situation here, it shouldn’t leave your hand.
While I’m against age verification online, I am actually a fan of this specific implementation for age verification terminals at physical stores. I already use my passport card instead of my drivers license for this stuff IRL because it does not have my address on it.
If restaurants and stores adopt this technology I would probably switch to it. I have actually been hoping this exact thing with passports would happen, because I don’t think the great state of Minnesota is going to adopt digital drivers licenses within the next decade at this rate lol
Apple and issuing authorities cannot track where or when your ID is used
This should be true, but I am not sure what information Apple and/or the government receives about you when you add the card to your device. That may change my mind on this, I’d have to do more research.
If we’re being honest the most probable reason the government is backing this is to introduce age verification online though, so that’s not so good news.
Wouldn’t tap to share be a permanent share? Or does it delete itself after a few minutes once authenticated? Will have to see how it would work practically once its out with all its features and functionality for which it is built.
I guarantee they get your AppleID (and it is inherently “verified”!) so that they can make future warrentless requests via the portal easier: https://lep.apple.com/
For examples like this - is it possible to do this privately? I’m imagining where I visit a retailer to buy an age-restricted item and the retailer records your personal information (drivers license) into their terminal. Could be interesting for the device to attest to your age, but does not provide your name or DOB.