this post was submitted on 14 Mar 2025
432 points (98.4% liked)

Comic Strips

15109 readers
3701 users here now

Comic Strips is a community for those who love comic stories.

The rules are simple:

Web of links

founded 2 years ago
MODERATORS
 

you are viewing a single comment's thread
view the rest of the comments
[–] Bilaketari@reddthat.com 0 points 14 hours ago (2 children)

Well, because it won't be signed by a trusted CA for that task. Like if CAs had a category of certificate issuance that applied here (the standardisation issue) then it would be easy to spot a fake (which wouldn't be correctly signed). Alternatively, you could take the European approach of having everything government related (like public street parking, though Europe mostly uses apps for that, not signed QR codes) rely on government entities and those in turn on a national set of government CAs.

[–] Aux@feddit.uk 1 points 8 hours ago (1 children)

That doesn't make any sense. How would you know if something should or should not be signed? You wouldn't.

[–] Bilaketari@reddthat.com 1 points 1 hour ago (1 children)

If it becomes standard for public parking to be signed, everyone would know. If payment QR codes in general start being signed, your payment app might even know. Lastly there could even be signage by the code to help novices.

[–] Aux@feddit.uk 1 points 1 hour ago (1 children)

The point of a code is to not have an app in the first place. Thus there's no way to validate it.

[–] Bilaketari@reddthat.com 1 points 1 hour ago

It wouldn't need a separate app if, for instance, a standard QR payment format way created. If you just want a link to a website to pay, then naturally that would be less secure, but you could always put the URL below the QR code for redundancy (QR would only save time typing then).

[–] themoonisacheese@sh.itjust.works 1 points 8 hours ago (1 children)

Very cool. Why would anyone use qr codes then? When you can just write a url and that's free

[–] Bilaketari@reddthat.com 1 points 1 hour ago

QR codes are mostly meant to let you get an amount of info (they're mostly text-based) without having to type or enter it manually when you might make mistakes or when the process is just faster for the amount of text involved.