ongov / OpenVerify

The open source Verify app by the Government of Ontario
Apache License 2.0
121 stars 34 forks source link

Is Ontario joining the CommonTrust Network? #4

Closed Manouchehri closed 2 years ago

Manouchehri commented 2 years ago

First of all, thank you for open sourcing this! I think you should link to the repository somewhere in the App Store description, it's quite nice to see things appear to have been done properly.

Does Ontario plan to join the CommonTrust Network? I live in a region where we already use the exact same SMART® Health Card QR codes, but Ontario's aren't recognized. (I personally already have a Cayman and Ontario enhanced vaccine certificate, but I'm thinking about others who travel and don't.)

humphd commented 2 years ago

First of all, thank you for open sourcing this! I think you should link to the repository somewhere in the App Store description, it's quite nice to see things appear to have been done properly.

Agree! And the reverse link on the GitHub repo back to https://covid-19.ontario.ca/verify. I had to hunt to find the deployed app link.

Manouchehri commented 2 years ago

After doing a bit more research, Ontario should really join the CommonTrust Network. Seems like this is already a solved problem. I do like that Ontario's Verify app is open source (which the "official" app by is not), which is extremely helpful for privacy sensitive topics like this.

This would allow interoperability within Canada for British Columbia, Saskatchewan, Manitoba, Northwest Territories, and Yukon. https://www.commontrustnetwork.org/verifier-list

https://www.commontrustnetwork.org/joinhealth

You just need to submit a PR to this repo:

https://github.com/the-commons-project/vci-directory

spncrd commented 2 years ago

After doing a bit more research, Ontario should really join the CommonTrust Network. Seems like this is already a solved problem. I do like that Ontario's Verify app is open source (which the "official" app by is not), which is extremely helpful for privacy sensitive topics like this.

This would allow interoperability within Canada for British Columbia, Saskatchewan, Manitoba, Northwest Territories, and Yukon. https://www.commontrustnetwork.org/verifier-list

https://www.commontrustnetwork.org/joinhealth

You just need to submit a PR to this repo:

https://github.com/the-commons-project/vci-directory

This is something we're actively looking into. Right now our priority is lining up with our fellow provinces and territories under the guidance of the Public Health Agency of Canada. We're working closely across the confederation to chart a path here on GitHub to share public keys and test cases openly. Stay tuned.

amanjunkie commented 2 years ago

I agree with the post above. Ontario should join the CommonTrust Network. Countries like Singapore require issuers of SMART Health Cards in the US and Canada to be registered on the CommonTrust Network, or else the vaccination record is not recognized. This would mean that residents of Ontario would not be able to travel there (while residents of BC, Quebec etc would). When you do think Ontario would be able to join the CommonTrust Network?

spncrd commented 2 years ago

No update on timelines but I can share that this continues to be a priority we are actively moving along.

Manouchehri commented 2 years ago

After doing a bit more research, Ontario should really join the CommonTrust Network. Seems like this is already a solved problem. I do like that Ontario's Verify app is open source (which the "official" app by is not), which is extremely helpful for privacy sensitive topics like this.

This would allow interoperability within Canada for British Columbia, Saskatchewan, Manitoba, Northwest Territories, and Yukon. https://www.commontrustnetwork.org/verifier-list

https://www.commontrustnetwork.org/joinhealth

You just need to submit a PR to this repo:

https://github.com/the-commons-project/vci-directory

This is something we're actively looking into. Right now our priority is lining up with our fellow provinces and territories under the guidance of the Public Health Agency of Canada. We're working closely across the confederation to chart a path here on GitHub to share public keys and test cases openly. Stay tuned.

Instead of working with each province slowly, this could all be avoided and solved immediately by joining the CommonTrust Network, no?

spncrd commented 2 years ago

@Manouchehri We are working through the Public Health Agency of Canada (PHAC) to align with the other provinces and territories firstly around a common proof of vaccination certificate - that's what contains the SMART Health Card QR code. And since we've already got agreement to share keys and and test cases across Canada via PHAC that integration is more feasible in the short term that CommonTrust which requires a fair bit of legal and policy review to move forward on.

serenadolan commented 2 years ago

What about the Vaccine Credential Initiative list?

spncrd commented 2 years ago

@serenadolan both are addressed a complementary package (framework/standard network and operationalization network).

serenadolan commented 2 years ago

Given that by 30 October, we need to show proof of vaccination for travel, is this something the team is working to adhere to in terms of getting onto the CTN or VCI?

Manouchehri commented 2 years ago

@Manouchehri We are working through the Public Health Agency of Canada (PHAC) to align with the other provinces and territories firstly around a common proof of vaccination certificate - that's what contains the SMART Health Card QR code. And since we've already got agreement to share keys and and test cases across Canada via PHAC that integration is more feasible in the short term that CommonTrust which requires a fair bit of legal and policy review to move forward on.

@spncrd Maybe Ontario should seek assistance from the Government of Yukon, as they've managed to figure out how to participate in the CommonTrust Network already.

spncrd commented 2 years ago

Thanks, @Manouchehri, we're in contact with the other provinces and territories regularly. The mechanics of joining CommonTrust and VCI are straightforward, but policy and legal review does take time and must be prioritized against other deliverables. We continue to advocate for this as a priority and our colleagues in the Ministry of Health are keen as well. I understand things are moving and will keep you all looped in.

serenadolan commented 2 years ago

@spncrd Roughly how long do you think this policy and legal review would take? It is definitely a priority for travel.

Aseatondream commented 2 years ago

Ontario joining the Common Trust Network is a must. I am trying to go back to Singapore with my partner who has non-curable cancer. As a Singaporean he can go back. I cannot as they will only let short term visitors in who are on the Common Trust Network. This has created a situation where I, as a Canadian, cannot travel with my partner to see my in-laws in Singapore because I live in Ontario....but if Iived in BC, The Yukon, or The Northwest Territories I could go back no problem...because they have joined the CommonTrustNetwork.

spncrd commented 2 years ago

@Aseatondream my deepest sympathies, and thank you for the framing the human cost. I am doing everything I can to move this along, but the policy review and decision ultimately sits in the Ministry of Health.

To formally correspond with the Ministry of Health you can use the following contact form (being sure to request a reply): https://www.ontario.ca/feedback/contact-us?id=25811&nid=98977

@serenadolan and anyone with similar sentiments and concerns might see more traction via the above channel.

Manouchehri commented 2 years ago

@Aseatondream my deepest sympathies, and thank you for the framing the human cost. I am doing everything I can to move this along, but the policy review and decision ultimately sits in the Ministry of Health.

@spncrd I do not see anything in the getting started page that would require a policy review. I question if the correct technical information is being passed along to decision makers, as joining the CommonTrust Network does not share any additional information.

Publicly sharing your public key with The Commons Project Foundation should not expose any information that we (the public) don't already have. If publishing your public key in a public directory causes a security or privacy concern, then https://github.com/ongov/OpenVerify/issues/1#issue-1027065216 would be correct.. 🙄

Manouchehri commented 2 years ago

And since we've already got agreement to share keys

To clarify https://github.com/ongov/OpenVerify/issues/4#issuecomment-951932193, are you saying agreements are needed to share public keys?

Aseatondream commented 2 years ago

Thank you. I did submit through the Ministry of Health link a couple of days ago, as well as through my local MPP. Awaiting responses. I do encourage anyone reading this to also submit through: https://www.ontario.ca/feedback/contact-us?id=25811&nid=98977 https://www.ontario.ca/feedback/contact-us?id=25811&nid=98977

Alan\

On Nov 4, 2021, at 1:54 PM, Spencer Daniels @.***> wrote:

@Aseatondream https://github.com/Aseatondream my deepest sympathies, and thank you for the framing the human cost. I am doing everything I can to move this along, but the policy review and decision ultimately sits in the Ministry of Health.

To formally correspond with the Ministry of Health you can use the following contact form (being sure to request a reply): https://www.ontario.ca/feedback/contact-us?id=25811&nid=98977 https://www.ontario.ca/feedback/contact-us?id=25811&nid=98977 @serenadolan https://github.com/serenadolan and anyone with similar sentiments and concerns might see more traction via the above channel.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ongov/OpenVerify/issues/4#issuecomment-961283359, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWLDU6DBRUS5FSFYRU3TQCDUKLJG3ANCNFSM5GDZM4DA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

spncrd commented 2 years ago

@Manouchehri it's beyond my purview as to the level of detail of approvals and review required to join a network like CommonTrust, but I would expect a focus on privacy and legal due diligence to account for some of the time elapsed and some to come.

serenadolan commented 2 years ago

@spncrd Thank you for the link, I have submitted accordingly. I think most of us here are anxious to be able to go home/ go about what we need to do.

Aseatondream commented 2 years ago

In the last two hours Quebec, Manitoba, and Saskatchewan were added to the Common Trust Network (BC, Yukon and Northeast Territories were already there). See link

https://www.commontrustnetwork.org/verifier-list https://www.commontrustnetwork.org/verifier-list

Come on Ontario!

Alan

On Nov 4, 2021, at 2:35 PM, serenadolan @.***> wrote:

@spncrd https://github.com/spncrd Thank you for the link, I have submitted accordingly. I think most of us here are anxious to be able to go home/ go about what we need to do.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ongov/OpenVerify/issues/4#issuecomment-961312814, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWLDU6AUZXNK3F2VEK3NMG3UKLN6PANCNFSM5GDZM4DA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

spncrd commented 2 years ago

@Aseatondream very timely, I was just pulling the latest list to pass along and saw it updated too!

serenadolan commented 2 years ago

@Aseatondream @spncrd Hopefully this gives a much needed push to get us into the list as well! It looks like most provinces and territories are on the list now so I am hoping Ontario now gets in quick too.

Aseatondream commented 2 years ago

YES!!!

Alan

On Nov 4, 2021, at 3:20 PM, serenadolan @.***> wrote:

@Aseatondream https://github.com/Aseatondream @spncrd https://github.com/spncrd Hopefully this gives a much needed push to get us into the list as well! It looks like most provinces and territories are on the list now so I am hoping Ontario now gets in quick too.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ongov/OpenVerify/issues/4#issuecomment-961346153, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWLDU6CYRMJ5YFWX6SQCD33UKLTIHANCNFSM5GDZM4DA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

serenadolan commented 2 years ago

I understand that everyone has a different approach but the other provinces got onto it so quick!

Manouchehri commented 2 years ago

I understand that everyone has a different approach but the other provinces got onto it so quick!

@serenadolan It's quick because it's not difficult..

@TASelwyn has already done 100% of the technical work for free over two weeks ago. Literally all Ontario has to do is sign a piece of paper saying they're going to promise to try to only issue legitimate certificates.

https://github.com/the-commons-project/vci-directory/pull/200

Aseatondream commented 2 years ago

I’m going to remain positive based on what we just saw happen today and assume it is coming real soon…but if not it may need to hit the news media with a headline like “Think you can travel where Canadians can travel? If your from Ontario…don’t be so sure”.

Alan

On Nov 4, 2021, at 4:26 PM, David Manouchehri @.***> wrote:

I understand that everyone has a different approach but the other provinces got onto it so quick!

@serenadolan https://github.com/serenadolan It's quick because it's not difficult..

@TASelwyn https://github.com/TASelwyn has already done 100% of the technical work for free over two weeks ago. Literally all Ontario has to do is sign a piece of paper saying they're going to promise to try to only issue legitimate certificates.

the-commons-project/vci-directory#200 https://github.com/the-commons-project/vci-directory/pull/200 — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ongov/OpenVerify/issues/4#issuecomment-961391192, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWLDU6ASDKIVI2BOVSBS6CTUKL3BBANCNFSM5GDZM4DA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

TASelwyn commented 2 years ago

The Ontario Ministry of Health needs to be spammed (figuratively speaking, not literally) with requests until they join the CommonTrust Network. There's absolutely no reason for them not to join. I've already contacted them on my own. I do believe it will happen in the coming weeks, especially after Quebec joined. Which, Ontario's system is basically a carbon copy of Quebecs.

Aseatondream commented 2 years ago

Just got this response from my local MPP (although it actually sounds like they simply filled out the same form I did). Still…as Thomas Selwyn says…they need to be inundated with people demanding it. :

“Hello Alan,

First of all, I am so sorry to hear about your partner’s diagnosis. That must be so hard for your entire family.

I have passed your question and the link on to the Ministry of Health to ask them to register on the Common Trust Network. It is very helpful that other provinces have already done it.

I will let you know when I hear back from them - I hope it will be good news!

Emma

Emma Beattie, Constituency Assistant Office of MPP Suze Morrison, Toronto Centre“

Sent from my iPhone

On Nov 4, 2021, at 4:55 PM, Thomas Selwyn @.***> wrote:

 The Ontario Ministry of Health needs to be spammed (figuratively speaking, not literally) with requests until they join the CommonTrust Network. There's absolutely no reason for them not to join. I've already contacted them on my own. I do believe it will happen in the coming weeks, especially after Quebec joined. Which, Ontario's system is basically a carbon copy of Quebecs.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

spncrd commented 2 years ago

Thanks for the engagement and feedback, all. I'm passing it up to very senior levels and advocating for users like you. These issues matter and I appreciate you posting here. But formal channels like official ministry correspondence and via MPPs get logged, tracked and responded to in a way that will register differently than GitHub. Many avenues are effective, but some are more effective than others when it come to policy.

spncrd commented 2 years ago

And to pull back the curtain, the forms have been filled out and ready to go for weeks to join VCI and Common Trust and I have volunteered to facilitate the submission process. However, the approval and final decision to do so sits in the Ministry of Health. The Ontario Digital Service is part the Ministry of Finance - there is truly only so much we can do outside of the app itself. I hope you all can appreciate that.

Aseatondream commented 2 years ago

Thank you! I have only been part of this conversation today, but I have sensed from the beginning you are a good person doing what you can. I appreciate it very much.

Alan

Sent from my iPhone

On Nov 4, 2021, at 9:55 PM, Spencer Daniels @.***> wrote:

 Thanks for the engagement and feedback, all. I'm passing it up to very senior levels and advocating for users like you. These issues matter and I appreciate you posting here. But formal channels like official ministry correspondence and via MPPs get logged, tracked and responded to in a way that will register differently than GitHub. Many avenues are effective, but some are more effective than others when it come to policy.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

Aseatondream commented 2 years ago

Tha k you got that info! Again…it’s appreciated.

Alan

Sent from my iPhone

On Nov 4, 2021, at 10:16 PM, Spencer Daniels @.***> wrote:

 And to pull back the curtain, the forms have been filled out and ready to go for weeks to join VCI and Common Trust and I have volunteered to facilitate the submission process. However, the approval and final decision to do so sits in the Ministry of Health. The Ontario Digital Service is part the Ministry of Finance - there is truly only so much we can do outside of the app itself. I hope you all can appreciate that.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

lonelypilgrimonearth commented 2 years ago

Jumping on to the ask for Ontario to be on the verified list asap. I lost my father in May of 2020 due to Covid and was unable to travel for the funeral. Now I was looking to go meet my mum and sis in Singapore since travel opened up and suddenly find that Ontario vaccine proof is not on the approved list. It has been such a nerve racking time, naively I had already booked tickets on a VTL flight to Singapore for Dec 2nd week, the thought that Ontario would not be in approved list never crossed my mind. I read in the conversations above the suggestion to write to ONTHealth, will do so but really feeling not too positive at the moment.

serenadolan commented 2 years ago

@lonelypilgrimonearth I am in the same boat as you. My VTL flight is 3 weeks from today, really hoping it gets sorted by then.

Aseatondream commented 2 years ago

Nova Scotia has just been added to Common Trust Network.

lonelypilgrimonearth commented 2 years ago

Have written to Ontario health and local MPP. Let's hope something works and soon :))

serenadolan commented 2 years ago

Why is it so easy for everyone else but not Ontario? I really don't get it.

Aseatondream commented 2 years ago

Newfoundland and Labrador now added

Alan Read-Chua, Broker and Branch Manager Sutton Group - Associates Realty Inc., Brokerage Office: 416 966-0300 Cell: 416 825-1803 @.***

On Nov 5, 2021, at 11:57 AM, serenadolan @.***> wrote:

Why is it so easy for everyone else but not Ontario? I really don't get it.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ongov/OpenVerify/issues/4#issuecomment-962013410, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWLDU6DDM563SRVCD23Q4ADUKQEHFANCNFSM5GDZM4DA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

serenadolan commented 2 years ago

I am happy for other provinces. Gutted that there is still no action on ours.

Aseatondream commented 2 years ago

I’m keeping hope. It’s gone from 3 provinces/territories to 8 in the last 36 hours.

Sent from my iPhone

On Nov 5, 2021, at 10:51 PM, serenadolan @.***> wrote:

 I am happy for other provinces. Gutted that there is still no action on ours.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

296ELKS commented 2 years ago

I just looked at the VTL requirements for Singapore and looks like they have solved the problem for travellers to Singapore. Now SmartHealth Cards for all provinces will be accepted. "https://safetravel.ica.gov.sg/vtl/requirements-and-process > Accepted Proof Of Vaccination > 3c" was added overnight.

I want to thank @spncrd for his responsiveness on this forum and his commitment to helping people here. This is probably not first and foremost in your job description, but you did help give people some hope through your transparency here; not many in the business would do what you did here and I appreciate it.

lonelypilgrimonearth commented 2 years ago

Wowww...this is such good news, will try and apply for the VTL right away.

I totally second the thanks to @spncrd for this stream and all the direction and responses. It was only after I found this conversation that I felt a little less anxious about the whole thing. Thanks again to all.

Aseatondream commented 2 years ago

This is awesome!!!!

Sent from my iPhone

On Nov 6, 2021, at 10:16 AM, Ernestly @.***> wrote:

 I just looked at the VTL requirements for Singapore and looks like they have solved the problem for travellers to Singapore. Now SmartHealth Cards for all provinces will be accepted. "https://safetravel.ica.gov.sg/vtl/requirements-and-process > Accepted Proof Of Vaccination > 3c" was added overnight.

I want to thank @spncrd for his responsiveness on this forum and his commitment to helping people here. This is probably not first and foremost in your job description, but you did help give people some hope through your transparency here; not many in the business would do what you did here and I appreciate it.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

Aseatondream commented 2 years ago

Yes…huge thanks to @spncrd for all he has been trying to do!

Sent from my iPhone

On Nov 6, 2021, at 10:16 AM, Ernestly @.***> wrote:

 I just looked at the VTL requirements for Singapore and looks like they have solved the problem for travellers to Singapore. Now SmartHealth Cards for all provinces will be accepted. "https://safetravel.ica.gov.sg/vtl/requirements-and-process > Accepted Proof Of Vaccination > 3c" was added overnight.

I want to thank @spncrd for his responsiveness on this forum and his commitment to helping people here. This is probably not first and foremost in your job description, but you did help give people some hope through your transparency here; not many in the business would do what you did here and I appreciate it.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub, or unsubscribe. Triage notifications on the go with GitHub Mobile for iOS or Android.

lonelypilgrimonearth commented 2 years ago

I just tried uploading the QR pdf for the VTP but unfortunately get the same error :(

296ELKS commented 2 years ago

I got the same error as well and have sent the error here: https://form.gov.sg/#!/60e693e777fd6b00111885d5

They have been quite responsive on that forum - so hopefully they will fix it soon. [This week I had received a message that they were "working on it", and today it looks like the policy changed] It IS a Saturday night there, so I'd expect it would maybe take a business day or 2 for the systems to update.

lonelypilgrimonearth commented 2 years ago

Thanks, sent in the enquiry form, yep I think it.may be Monday before any new developments.

Aseatondream commented 2 years ago

Go back to Singapore site. They now have this message with a link:

For short-term visitors and long-term pass holders

If you encounter an error upon uploading the QR code on your vaccination certificate onto the VTP application portal, despite meeting the requirements above, please write to the Safe Travel Office using the enquiry form here https://go.gov.sg/sto-enquiry and provide your vaccination certificate. If you are unable to obtain one of the digitally verifiable vaccination certificates listed above, you will not be eligible for travel on the VTL.

Alan

On Nov 6, 2021, at 10:57 AM, lonelypilgrimonearth @.***> wrote:

Thanks, sent in the enquiry form, yep I think it.may be Monday before any new developments.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub https://github.com/ongov/OpenVerify/issues/4#issuecomment-962463447, or unsubscribe https://github.com/notifications/unsubscribe-auth/AWLDU6BYILS4BZV7PDPBRTDUKVF5FANCNFSM5GDZM4DA. Triage notifications on the go with GitHub Mobile for iOS https://apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675 or Android https://play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign%3Dnotification-email%26utm_medium%3Demail%26utm_source%3Dgithub.

TASelwyn commented 2 years ago

Damn. Gotta praise Singapore for their quick changes and responses to this issue for people. How many provinces are left to join the CommonTrust network anyways? Seems like its just Ontario now lol