Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

An always-online requirement is not feasible everywhere.


You can fail open. The QR code contained a signed ticket ID and expiry. You locally validate the signature and expiry and remotely attempt to validate reuse. If the remote validation is slow or fails just accept the ticket and log it.


That is what happens, however it exposes the transit company to a risk that many of them aren't willing to accept.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: