Open jkrwdf opened 3 years ago
https://github.com/corona-warn-app/cwa-wishlist/issues/526 is the counter argument for not doing something like this.
I understand that there was a time (May 2021) when this period in other countries (Austria) was longer than at that time in Germany and that the CWA team hence decided that certificates shall remain forever (in contrast to the main-screen block which goes to such "disabled" state after some days).
Nevertheless I would not close this issue here right now because I consider it useful to re-evaluate that decision under the current circumstances.
Not only has this "Austria" rule meanwhile also changed (IMHO it's now also 24 hrs), but I claim that the CWA (and CovPass as well, BTW) currently make it too easy to use a RAT/PCR test result forever. I am aware that the official process is different and not affected by this situation, but personal and anecdotic experience shows that the real-life test currently can always be bypassed showing such certificate, and I consider the win for the society today as higher than the "Here we have a country where you can use a RAT after x days".
Current Implementation
In the CWA you can store not only vaccination certificates, but also test certificates (rapid antigen or PCR). Those tests loose their meaning after a certain time, for example RAT after 48 hours max, PCR maybe 96 hours.
However, the CWA shows test certificates for an indefinite time (likely only limited by the technical validity) in unchanged form in the presentation screen. And in contrast to CovPass which uses a different visualization at least for the various certificate types (Vaccination, Antigen, ...), CWA shows the test certificate indistinguishable from a vaccination certificate.
Suggested Enhancement
I know that CWA has a visualization for "expired" certificates in the presentation screen. I saw it myself when I had imported the "Spongebob" certificate whose signing certificate was then removed from the trust list. I think it was a grey picture with an exclamation mark.
I wish that this visualization is also used for test certificates after a period of time which can be considered to be covering the maximum validity time from medical perspective.
Expected Benefits
Given the fact that xG-checks frequently only use the "Let me look at your phone" technique (in advanced form boosted by the "Let me tap on that QR code to see it's no picture; duh"), the current implementation allows (eventually even accidental) use of a test certificate for an arbitrary time. This shall be made more prominent as not wished.