UBports Robot Logo UBports Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Groups
    • Search
    • Register
    • Login

    French ID app interoperability.

    Scheduled Pinned Locked Moved Off topic
    39 Posts 14 Posters 3.9k Views 6 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • D Offline
      domubpkm @pparent
      last edited by domubpkm

      @pparent This should partially work with Micro G as mentioned under plexus, but it's vague. And already, if the app was 100% compatible with Micro G, it would be useful.

      pparentP 1 Reply Last reply Reply Quote 0
      • Vlad NirkyV Offline
        Vlad Nirky @pparent
        last edited by Vlad Nirky

        @pparent
        Hello.
        I was wondering if the UBports Foundation could contact one of the members of the European Parliament mentioned in this article to discuss a survival strategy...
        (sorry, it's in French... 😉 )
        https://linuxfr.org/news/la-commission-europeenne-publie-une-feuille-de-route-sur-le-logiciel-libre

        1 Reply Last reply Reply Quote 0
        • pparentP Offline
          pparent @domubpkm
          last edited by

          @domubpkm

          Well I'm not sure but given what I have published above, It could mean that it can only work by design on an un-compromised google certified devices ( I've read that there exists so-called technologies as "Android hardware-backed keystore" and "Trusted Execution Environment" , could the app possibly rely on that? ). So maybe it's not working with microG because they don't want it to, because they want the app to run only on a so-called "safe envieronement" provided by google.

          D P 2 Replies Last reply Reply Quote 0
          • D Offline
            domubpkm @pparent
            last edited by

            @pparent said in French ID app interoperability.:

            so-called "safe envieronement

            We can say that ! Because if you read all the precautions they take concerning the app, it's a bit like the instructions for a medication: once you've read it, you no longer want to take the medication at all! 😄

            1 Reply Last reply Reply Quote 0
            • P Offline
              projectmoon @pparent
              last edited by

              @pparent said in French ID app interoperability.:

              @domubpkm

              Well I'm not sure but given what I have published above, It could mean that it can only work by design on an un-compromised google certified devices ( I've read that there exists so-called technologies as "Android hardware-backed keystore" and "Trusted Execution Environment" , could the app possibly rely on that? ). So maybe it's not working with microG because they don't want it to, because they want the app to run only on a so-called "safe envieronement" provided by google.

              This kind of stuff is happening more and more. Even apps like the ChatGPT app for Android require "Play Integrity." It's an API that needs to be made illegal, and a lot of national apps are relying on it too. For example, the Icelandic app Auðkenni used to work without it, but now your device has to be "secure" in order to use the app. Thankfully, in that case, there is an alternative method of authentication using SIM Toolkit.

              MicroG is able to execute SafetyNet/Play Integrity, but the device has to have the bootloader locked and a bunch of other stuff. And depending on level of attestation required by the app, it may or may not actually run.

              1 Reply Last reply Reply Quote 0
              • D Offline
                domubpkm
                last edited by

                contact@france-identite.gouv.fr

                pparentP 1 Reply Last reply Reply Quote 0
                • pparentP Offline
                  pparent @domubpkm
                  last edited by pparent

                  Hello,

                  Did anyone get any reply from contact@france-identite.gouv.fr ?

                  I am thinking it should be studied the possibility of filing a complaint with the "Defenseur des droits", because I think there are various things about that app that probably do not respect the legislation, given that it is only available for Google and Apple.

                  Any thought on that?

                  D DJacD 2 Replies Last reply Reply Quote 1
                  • D Offline
                    domubpkm @pparent
                    last edited by

                    @pparent . Not directly about your question but do you know https://uattest.net/ , very nice Volla initiative. As you are a developper who offers great job and apps, this may interest you

                    G 1 Reply Last reply Reply Quote 0
                    • G Offline
                      gpatel-fr @domubpkm
                      last edited by

                      @domubpkm

                      gp@mono:/shared/uattest/Backend$ npm install
                      npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
                      npm warn deprecated glob@7.2.3: Glob versions prior to v9 are no longer supported
                      npm warn deprecated supertest@6.3.4: Please upgrade to supertest v7.1.3+, see release notes at https://github.com/forwardemail/supertest/releases/tag/v7.1.3 - maintenance is supported by Forward Email @ https://forwardemail.net
                      npm warn deprecated superagent@8.1.2: Please upgrade to superagent v10.2.2+, see release notes at https://github.com/forwardemail/superagent/releases/tag/v10.2.2 - maintenance is supported by Forward Email @ https://forwardemail.net
                      npm warn deprecated rimraf@3.0.2: Rimraf versions prior to v4 are no longer supported
                      npm warn deprecated glob@8.1.0: Glob versions prior to v9 are no longer supported
                      npm warn deprecated @humanwhocodes/config-array@0.13.0: Use @eslint/config-array instead
                      npm warn deprecated @humanwhocodes/object-schema@2.0.3: Use @eslint/object-schema instead
                      npm warn deprecated eslint@8.57.1: This version is no longer supported. Please see https://eslint.org/version-support for other options.
                      
                      added 595 packages, and audited 599 packages in 3m
                      
                      184 packages are looking for funding
                        run `npm fund` for details
                      
                      19 vulnerabilities (1 low, 8 moderate, 10 high)
                      
                      1 Reply Last reply Reply Quote 0
                      • DJacD Offline
                        DJac @pparent
                        last edited by

                        @pparent no response, sorry.

                        1 Reply Last reply Reply Quote 0

                        Hello! It looks like you're interested in this conversation, but you don't have an account yet.

                        Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.

                        With your input, this post could be even better 💗

                        Register Login
                        • First post
                          Last post