JWTs done right: Quebec’s proof of vaccination – Mikkel Paulson

Note: Data in this blog post has been anonymized, for obvious reasons.
When Quebec announced that it would be sending proof-of-vaccination emails to
everyone who had been vaccinated with an attached QRcode, I got a bit weak at
the knees. I couldn’t wait to pick it apart and shake my head at the amount of
private medical information that would doubtless be exposed in the process.
Well, my proof of vaccination finally arrived, and the result is…
actually pretty okay. Still, there’s alw…