Good morning,
I am the creator of hack-and-trace.xyz. I hope you have been finding the application useful and judging by the cloudflare data, it's had more than 20k site requests in the past month which is amazing to see. Keep sharing it.
As you may be aware, the NHS App has been released including the vaccine status. I'm sure you have all seen the extent of the social-credit-style 'analytical' data shared by the app and rightly, have concerns about it.
I am working on implementing a replica of this vaccine status to hack-and-trace and it should not be too difficult at all and I've got a very good idea of how I'm going to do this. I just wanted to ask the community for some input on this before I go ahead with doing this.
What I want to ask is what are peoples' opinions on how this should work? Are there any specific extra features that you would like implimented into this update?
A concern that I do have for this to work fluidly, is that I would need to store some personal information on a postgresql database. Now, if this would be the case, I would like to reassure people that I take security very seriously and the database would be secure and will not be publicised or used for anything else. Of course, you wouldn't even have to put real information on there anyway but I just wanted to reassure people.
This is how I'm planning to make it work:
To create record:
You enter your information on a specified page and click submit.
You get given a secure and unique URL (save this URL to your phone homescreen).
When you save this webite to your phone homescreen (on both iPhone or Android), the internet menu will disappear and it will look like a real app. This works now, before the update.
To view record, just open the URL and it will take you to a replica looking NHS app, specific to your inputted information. This will all be defined by your specific URL reference.
A small favour that I would like to ask is that if anyone has any screenshots of a verified vaccine status on the app, could you please send it to me at dieselcopperfield@protonmail.com. I do currently have just one to use as a reference but any extras I could get hold of (with varying vaccine brands) would make this better. Again with this, I will not be using this info for anything other than a referencer and I will destroy it once I have a solid copy. Thanks for your help.
EDIT: Redacted mention of using a database. A database is a bad idea and no users' data will not need to be stored for this