[andylynch]

It’s public key based - the health authorities use their private keys to sign, and the EU has a gateway service which gives validation app the public keys. Details and GitHub link -> https://ec.europa.eu/info/news/eu-digital-covid-certificate-...