|
|
|
BarTender:
kiwifidget:
My parents use the same email address, is that likely to be a problem?
Yes, you can only associate one email to one person... Will update the above. Good point, hadn't thought about that.
If its a Gmail account you could also try the "." trick
kiwifidget: hmmm I wonder if the + trick will work.
YMMV... Would be interested to know. My folks have different emails and I don't want to set them up with the same email to try.
BarTender:
itxtme:
If you have a valid and current Realme by all means use it, if you do not I would use the direct method which takes a couple minutes
It can't be just a RealMe account, it needs to be a Verified Identity which you can only get if you renew your passport via RealMe or have gone to the Post Shop. There is the option to get verified online which is a non-trivial task where RealMe do a whole liveness check but it is my view the barrier for entry for the average non-technical person is too high to get access to your vaccine certificate.
I logged in with my RealMe account which has not been verified. MyCovidRecord (after accepting my login via RealMe) asked me to prove my identity directly using DL, Passport, etc. It was a quick process to enter my passport details and viola it was all done. I assume I actually ended up doing a similar process to what people who do a direct email login go through.
Basically my understanding is:-
- Verfified RealMe => All good to go. (I assume in this case they can associate your RealMe with your NHI automatically).
- Non-Verified RealMe OR Email => Input DL/Passport/etc detail so they can associate ID/NHI on the MOH side. Then all good to go.
I agree just going the direct email route is probably the easiest way.
Just wanted to note that my experience with a non-verified RealMe account was very smooth -- the on-boarding process took all of a few minutes for me and was straightforward. If someone would rather use their existing (even if unverified) RealMe account I don't think it's such a terrible route to take.
Not having any luck getting beyond the 'verification code' page.. email never turns up (gmail), have been trying 30min (not in spam either). Will have another crack over the weekend.
People often mistake me for an adult because of my age.
Keep calm, and carry on posting.
Referral Links: Sharesies -
Are you happy with what you get from Geekzone? If so, please consider supporting us by subscribing.
No matter where you go, there you are.
BarTender:
It can't be just a RealMe account, it needs to be a Verified Identity which you can only get if you renew your passport via RealMe or have gone to the Post Shop. There is the option to get verified online which is a non-trivial task where RealMe do a whole liveness check but it is my view the barrier for entry for the average non-technical person is too high to get access to your vaccine certificate.
Stu: Talked my parents through the process over the phone today using their driver's licences. One registered using a Gmail account, and one using an outlook.com account. Both received the verification code email immediately. Done and dusted.
I'm not sure getting the vaccination certificate set up on their phones will be as easy, when the time comes.
The government has stated that it will be possible to produce a printed version of the vaccine certificate. I think that will probably be a safer solution for people who don't have a modern user friendly phone, or who aren't confident with technology.
Just updated the first post @KiwiSurfer and @dclegg with my understanding of the non-verified RealMe accounts. As the whole EOI process is done on the MoH site all you are really saving is having to remember one more password.
And for @Stu and @alasta the process to get the certificate will be via the site or via the call centre from what I understand. So you will be able to download a PDF (or get it emailed to you) once you have logged in.
So having sorted out access to the site prior to needing it will make everyone's life easier.
BarTender:
So you will be able to download a PDF (or get it emailed to you) once you have logged in.
So having sorted out access to the site prior to needing it will make everyone's life easier.
What’s to stop people from sharing PDF’s, printing copies for others? Is photo ID going to be needed to accompany it?
MileHighKiwi: I registered and selected drivers license as my ID and wasn't required to hold it up to the camera or anything. I've had trouble logging in a couple of times too so I took a screen shot and saved it.
People often mistake me for an adult because of my age.
Keep calm, and carry on posting.
Referral Links: Sharesies -
Are you happy with what you get from Geekzone? If so, please consider supporting us by subscribing.
No matter where you go, there you are.
rugrat: What’s to stop people from sharing PDF’s, printing copies for others? Is photo ID going to be needed to accompany it?
Yes, just because you have the QR on your phone is meaningless. The QR has Name + DOB so I would expect DL / Passport / HANZ or whatever photo ID to make sure they match.
Really interested to see what plays out in legislation and how enforcement will work.
Wrote a little bit of code tonight in python to verify the QR code based on the technical spec: https://nzcp.covid19.health.nz/
Using the cwt library:
import datetime
import json
import base64
import cwt
from cwt import COSEKey
from pygments import highlight
from pygments.lexers import JsonLexer
from pygments.formatters import TerminalFormatter
try:
nzkey = COSEKey.from_jwk({
"kty": "EC",
"kid": "key-1",
"crv": "P-256",
"x": "zRR-XGsCp12Vvbgui4DD6O6cqmhfPuXMhi1OxPl8760",
"y": "Iv5SU6FuW-TRYh5_GOrJlcV_gpF_GpFQhCOD8LSk3T0"
})
QR = "NZCP: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"
B32VAL = base64.b32decode(QR.split('/')[2])
decoded = cwt.decode(B32VAL, nzkey)
print('Raw Response')
print(decoded)
print('Decoded Response')
print('Issued ' + datetime.datetime.utcfromtimestamp(decoded[5]).strftime('%Y-%m-%d %H:%M:%S'))
print('Expires ' + datetime.datetime.utcfromtimestamp(decoded[4]).strftime('%Y-%m-%d %H:%M:%S'))
json_str = json.dumps(decoded['vc'], indent=4)
print(highlight(json_str, JsonLexer(), TerminalFormatter()))
|
|
|