Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

How common are BankId certificates with incorrect data? #10

Open
BobbyTable opened this issue Feb 29, 2024 · 0 comments
Open

How common are BankId certificates with incorrect data? #10

BobbyTable opened this issue Feb 29, 2024 · 0 comments

Comments

@BobbyTable
Copy link

So we've encountered a BankID authentication attempt with incorrect birthday data. The birthdate is off-by-one day. So for example the date is 02-01-1970 when the actual persons date is 01-01-1970. I've inspected my own BankID certificate and can see that there is a birthday field present

  1. I'm now assuming that the Bank has issued an incorrect BankID . Does this happen? Shall we expect to see more of this?

  2. In the cases where this happens, we are discussing what the reason might be:
    Theory A) It's a range-issue, where we can expect the date to be somewhere close in time of the correct date (for example plus minus one day)
    Theory B) It's a fat-finger problem where one of the numbers are typed wrong. This would give all the numbers in the date the same probability of being wrong. So it could be the same day, but a decade apart in time.

    I see how this might not be an issue for whoever manages this repo and reads this issue - but would love your thoughts!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant