Skip to content

fix link to icao-master-list #90

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix link to icao-master-list #90

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ The diagram below, taken from the ICAO, summarizes the process:

### How to retrieve the CSCA certificates?

You may have noticed that in the previous answer, we mentionned the DSC is stored in the passport chip itself, so it is easy to retrieve, but what about the CSCA certificates? Well, they are not in the passport chip, so we need to retrieve them from somewhere else. States will have agreements between them so they can easily exchange the certificates through trusted channels so border controls can be sure they got the right CSCA certificates. Multiple States publish their CSCA certificates publicly on their websites, such as is the case for [France](https://ants.gouv.fr/csca) and [Germany](https://www.bsi.bund.de/EN/Themen/Oeffentliche-Verwaltung/Elektronische-Identitaeten/Public-Key-Infrastrukturen/CSCA/Root_Cert_Germany/Root_Certificate_node.html) for example. The ICAO also maintains a Master List of CSCA certificates of many different countries that can be found [here](https://www.icao.int/Security/FAL/PKD/Pages/icao-master-list.aspx). So getting the CSCA certificates is not as easy as the DSCs, but it is not too hard either.
You may have noticed that in the previous answer, we mentionned the DSC is stored in the passport chip itself, so it is easy to retrieve, but what about the CSCA certificates? Well, they are not in the passport chip, so we need to retrieve them from somewhere else. States will have agreements between them so they can easily exchange the certificates through trusted channels so border controls can be sure they got the right CSCA certificates. Multiple States publish their CSCA certificates publicly on their websites, such as is the case for [France](https://ants.gouv.fr/csca) and [Germany](https://www.bsi.bund.de/EN/Themen/Oeffentliche-Verwaltung/Elektronische-Identitaeten/Public-Key-Infrastrukturen/CSCA/Root_Cert_Germany/Root_Certificate_node.html) for example. The ICAO also maintains a Master List of CSCA certificates of many different countries that can be found [here](https://www2023.icao.int/Security/FAL/PKD/Pages/icao-master-list.aspx). So getting the CSCA certificates is not as easy as the DSCs, but it is not too hard either.

### How often do the CSCA certificates rotate?

Expand Down