alt Hacker Newsnot really. the .pkpass needs to be signed. you can build the file locally but you won't be able to load it in apple wallet.
Replies
alessandropier • today at 4:57 PM
yeah was expecting that, thanks! do not use my gym pass pls
not really. the .pkpass needs to be signed. you can build the file locally but you won't be able to load it in apple wallet.
yeah was expecting that, thanks! do not use my gym pass pls
I'm not exactly sure how passes are signed, but in most digital signature schemes, you only sign the hash of the message, not the actual contents. Therefore you could conceivably do this in a privacy preserving way by only passing in the hash to be signed, which would allow the server to generate a valid signature without knowing the contents.