[Cryptography] IDs and licenses, not Possible reason why password usage rules

John Levine johnl at iecc.com
Fri Mar 6 14:07:58 EST 2020


In article <abf9eebe-5e85-98ed-4ecc-1f64827ee5b0 at symas.com> you write:
>The discussion here is why you can't use an expired photo ID for travel.
>Doesn't matter whether it's a driver's license or some other government
>issued ID.

Here's a simple thought experiment.  I book a plane ticket but I am a
very bad driver so the state revokes my license.  I still have the
physical card and the expiration date is in the future.

I take the train to the airport, and at security I present that
revoked license.  The TSA guy waves the little blue light at it (which
only detects cheap fakes that teens use to sneak into bars) and lets
me on the plane.  Is that a problem?  Not that I can see, since I'm
riding on the plane, not driving it.

>It *might* have identified you. It may be that you're John's brother who's
>wanted for murder, trying to leave the country, and John actually has
>the currently valid ID in his possession.

This is what Bruce Schneier calls a "movie plot threat."  We appear to
be done.

R's,
John

PS: in my movie plot, John gives his current license to his identical
twin, reports it lost, and gets a replacement while the twin uses the
original to flee the country.  "Oh, no," he says, "so that is what
happened to my unexpired license!  My brother must have snuck it out
of my wallet wnile I was in the sauna!  What a fiend hs is!"


More information about the cryptography mailing list