Feature Request: the ability to import international certificates from other EU countries

[lc-nyovchev]

Describe the bug, issue or concern

I opened the issue here because it refers to both Android and iOS apps.

Most EU countries now offer the posibility for visitors/tourists to vaccinate along with the citizens. Thus, it is a good idea to offer users the ability to import a certificate issued from another EU state rather than restrict them from importing them only from DigID. I, for example, had my 1-st dose in the Netherlands, and my second dose in Poland (which is currently not possible to import in the coronacheck app).

All certificates issued by EU states follow the same convention as described here, so there should be no difference whether you import a Dutch certificate, or, for example, a Greek one.

The Swiss Covid app (despite Switzerland not being a part of the EU) is a good example of an app that allows for such functionality.

Especially for international codes, this would be a very useful feature so users would have both certificates, regardless which EU member state issued them, in the coronacheck app.

Concerns: Verifiying Certificate Validity

Since each certificate issued from any EU state has a signature and an issuer, and a well described way (e.g here) to validate whether the signature has been tampered with, it shouldn't be hard to ignore faulty/forged ones.

Expected behavior

• go to Add Certificate
• choose A Vaccination Certificate
• Here your only two options are currently Login with DigID and I don't have a DigID. A new option should be added, for example, Scan QR code which allows the user to scan a paper/physical QR code with their camera.
• The Scan QR code feature should work for both RIVM issued paper certificates, AND also for any certificate issued by any other EU member state.

Governance

• [x] I've read the contributing document https://github.com/minvws/.github/blob/master/CONTRIBUTING.md
• [x] I've read and understand the Code of Conduct https://github.com/minvws/.github/blob/master/CODE_OF_CONDUCT.md
• [x] understand that any contributions or suggestions I made may make it into the actual code. I've read the License https://github.com/minvws/nl-covid19-notification-app-coordination/blob/master/LICENSE.txt and the contributor license agreement https://github.com/minvws/nl-covid19-notification-app-coordination/blob/master/CLA.md

[ijansch]

We've considered this but at present we've decided against it. Were agree it would be convenient, but it comes with certain legal and technical implications, which currently don't outweigh the benefit. Since this doesn't block anyone from using the app or their certificate, I'm closing this for now until we reconsider it.